🚨 CVE-2026-54857
Unauthenticated PHP Object Injection in Quirky <= 1.23 versions.