[CRITICAL] CI4MS Theme::upload is vulnerable to Zip Slip leading to RCE

PKSA-tyjg-jzs3-mzjt CVE-2026-41203 GHSA-xv3r-vr59-95rg

Affected package: ci4-cms-erp/ci4ms

Affected version: <0.31.5.0

Reported by:
GitHub