[CRITICAL] Crayfish allows Remote Code Execution via Homarus Authorization header

PKSA-y8f8-ggcf-nysv CVE-2025-25286 GHSA-mm6v-68qp-f9fw

Affected package: islandora/crayfish

Affected version: <4.1.0

Reported by:
GitHub