[HIGH] Grav: Unauthenticated Path Traversal via Missing Directory-Boundary Check in `plugin-asset-map.php` Static Asset Server (`index.php`)

PKSA-t3gq-ss3y-p7b7 CVE-2026-74907 GHSA-4v9q-p283-qc2m

Affected package: getgrav/grav

Affected version: <=2.0.14

Reported by:
GitHub