[MEDIUM] Smarty: SSRF via redirect bypass of trusted_uri using {fetch}

PKSA-mz8k-7h5s-m8kh CVE-2026-62993 GHSA-cq55-c7wv-pxmq

Affected package: smarty/smarty

Affected version: <4.5.7|>=5.0.0,<5.8.2

Reported by:
GitHub