[MEDIUM] Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter (CVE-2026-44738 bypass)

PKSA-sq15-xbtt-m678 CVE-2026-61842 GHSA-mc5q-6hpj-rp7j

Affected package: getgrav/grav

Affected version: <2.0.2

Reported by:
GitHub