[MEDIUM] October Rain has Environment Variable Exfiltration via INI Parser Interpolation

PKSA-qst9-2ky5-dhpn CVE-2026-25125 GHSA-g6v3-wv4j-x9hg

Affected package: october/rain

Affected version: <=3.7.13|>=4.0.0,<=4.1.9

Reported by:
GitHub