[HIGH] Shopper: Missing authorization on product removal actions in CollectionProducts component

PKSA-b41c-cwpv-9733 CVE-2026-56825 GHSA-2cg9-97gq-9mqp

Affected package: shopper/framework

Affected version: <2.9.2

Reported by:
GitHub