[HIGH] Grav: Incomplete callable validation in blueprint dynamic fields allows arbitrary static method invocation and file disclosure

PKSA-pr7b-2t3z-v8y8 CVE-2026-69088 GHSA-7pgq-cr25-xvc8

Affected package: getgrav/grav

Affected version: >=2.0.7,<=2.0.10

Reported by:
GitHub