[CRITICAL] Grav: Blueprint dynamic-data bare-function branch is denylist-gated and omits error_log, giving arbitrary file write

PKSA-nc3c-xf26-g5gp CVE-2026-75827 GHSA-f8wv-xp27-6gq7

Affected package: getgrav/grav

Affected version: <=2.0.14

Reported by:
GitHub