Threats affecting pkg:github/putyourlightson/craft-sprig

CVE-2026-27131 is a medium severity vulnerability in the Sprig plugin for Craft CMS that allows authorized admin users or users with explicit Sprig Playground access to expose sensitive information such as security keys and credentials. This exposure occurs in versions 2.0.0 up to but not including 2.15.2, and 3.0.0 up to but not including 3.15.2.