[MEDIUM] Smarty: Symlink path traversal out of trusted directories

PKSA-zw1q-6h4d-mf1m CVE-2026-62992 GHSA-f6wf-28g6-769x

Affected package: smarty/smarty

Affected version: <4.5.7|>=5.0.0,<5.8.2

Reported by:
GitHub