Race Condition

Overview ghost is a publishing platform Affected versions of this package are vulnerable to Race Condition via the accept function in ghost/core/core/server/services/invitations/accept.js, where the invite acceptance flow is not wrapped in a database transaction. Because the invite token is not...