[HIGH] Kirby: Access to image files and limited access to JSON files outside of the site root via path traversal in the media handling

PKSA-n74d-ghht-18nt CVE-2026-75594 GHSA-9vx2-j98c-p72w

Affected package: getkirby/cms

Affected version: >=5.0.0,<5.5.2|<=4.9.4

Reported by:
GitHub