[MEDIUM] Sprig Plugin for Craft CMS potentially discloses sensitive information via Sprig Playground

PKSA-73p9-59k3-bf4z CVE-2026-27131 GHSA-m59h-42jf-cphr

Affected package: putyourlightson/craft-sprig

Affected version: >=2.0.0,<2.15.2|>=3.0.0,<3.15.2

Reported by:
GitHub