[MEDIUM] Ibexa Kernel's files with blacklisted extensions can be still saved to drafts

PKSA-57bk-pwm5-t5tq GHSA-9j39-4686-m3c4

Affected version: >=4.6.0,<4.6.2|>=4.5.0,<4.5.6

Reported by:
GitHub

[LOW] Ibexa DXP Download route allows filename change

PKSA-tkd9-5b5p-5rkj GHSA-g95c-xc83-8353

Affected version: >=4.5.0,<4.5.4

Reported by:
GitHub