[HIGH] Laravel Backpack CRUD: Unverified password change in MyAccountController via mass assignment

PKSA-x88v-wcq5-j3kt CVE-2026-54175 GHSA-xpv2-hrfc-hw62

Affected package: backpack/crud

Affected version: >=7.0.0-alpha.1,<7.0.34|<6.8.11

Reported by:
GitHub