github_osv/GHSA-5j2g-3ph4-rgvm
Fix for authenticated remote code execution through layout update
### Impact
A layout block was able to bypass the block blacklist to execute remote code.
gitlab/packagist/openmage/magento-lts/GMS-2023-154
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in openmage/magento-lts.