CVE 3

• CVE-2026-62234: Webhook SSRF via Unrestricted cURL Protocols Jul 16, 2026
• CVE-2026-62237: Authenticated ReDoS via regex_replace in Twig Sandbox Jul 16, 2026
• CVE-2026-61451 : Pre-Authentication Password Reset Token Poisoning Jul 14, 2026