GHSA-67J9-C52G-W2Q9 Authorization Bypass in I hate money

Impact An authenticated member of one project can modify and delete members of another project, without knowledge of this other project's private code. This can be further exploited to access all bills of another project without knowledge of this other project's private code. With the default...