🚨 CVE-2026-39560
Unauthenticated PHP Object Injection in Hiroshi <= 1.5.1 versions.