[LOW] October CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls

PKSA-m19v-7rfv-5pmv CVE-2026-46696 GHSA-xv9m-fm3w-8w5x

Affected package: october/system

Affected version: >=4.0.0,<4.2.23|<3.7.17

Reported by:
GitHub