EasyCorp EasyAdminBundle

• CVE-2026-54087 High 7.6 EasyAdmin: Stored Cross-Site Scripting (XSS) via uploaded files served inline in FileField and ImageField 0.4%
• CVE-2026-81892 High 8.1 EasyAdmin custom-action dispatcher bypasses access_control on other routes 0.4%