Missing Authentication for Critical Function

Overview @actual-app/sync-server is an actual syncing server Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the SimpleFIN and PluggyAI integration endpoints. An attacker can access sensitive bank account balances and transaction information by...