[HIGH] Krayin CRM allows a remote attacker to execute arbitrary code via compose email function

PKSA-vkyr-b96k-z2ks CVE-2026-36340 GHSA-32px-ccfx-cxq3

Affected package: krayin/laravel-crm

Affected version: =2.1.5

Reported by:
GitHub