Psono Server permission and access control issue vulnerability

Versions 5.3.5 through 7.2.3 of Psono Server contain a vulnerability related to permission and access control. This issue arises because the permission class fails to enforce token write limits when claiming device code; as a result, authenticated remote attackers can exploit restricted API keys ...