cPanel before 55.9999.141 allows attackers to bypass a Security Policy by faking static documents (SEC-92).Referenceshttps://documentation.cpanel.net/display/CL/56+Change+Log