GHSA-84vh-m24q-wjjx Pocketbase: Unhandled panic in worker goroutines

• Go github.com/pocketbase/pocketbase: < 0.22.48 → fixed in 0.22.48 • Go github.com/pocketbase/pocketbase: >= 0.23.0, < 0.39.7 → fixed in 0.39.7

PocketBase already has builtin panic-recover middleware for the regular requests handling but it doesn't cover panics in internal child/worker goroutines which in some situations could cause termination of the server process. To prevent this from hapenning all existing internal worker functions were wrapped with the new helper `routine.SafeWrap(f)` _(auto recovers and returns any eventual panic as regular error)_. The vulnerability was reported by @gigioneggiando and it is strongly recommended to upgrade to PocketBase v0.39.7 _(the fix was also backported in v0.22.48 in case you are using older PocketBase < v0.23.0)_.