CVE-2026-66853

A restricted account can enumerate Limited-visibility organizations and their name, description and avatar by listing the public organization memberships of a known user through "GET /api/v1/users/username/orgs"...