Security Hotfix for CIVI-SA-2026-35 and CIVI-SA-2026-37