[MEDIUM] MultiFactor Authentication for SilverStripe can bypass MFA during password reset flow

PKSA-xxk3-rjxm-jftv CVE-2026-55186 GHSA-68wq-phq7-p2vg

Affected package: silverstripe/mfa

Affected version: <6.0.0

Reported by:
GitHub