🚨 CVE-2026-40757
Unauthenticated PHP Object Injection in Château <= 1.2.1 versions.