[MEDIUM] code16/sharp: Arbitrary class instantiation through the embed_key API parameter

PKSA-tzfc-wx9k-qbx7 CVE-2026-84974 GHSA-h24v-f482-8cwf

Affected package: code16/sharp

Affected version: >=10.0.0-beta.1,<10.0.0-beta.4|<9.23.0

Reported by:
GitHub