Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via document read operations that return the apiKey field without omitting it, allowing an authenticated user with read access to other user documents to retrieve those users' active API keys in plaintext. The fix...