User Impersonation

Overview Affected versions of this package are vulnerable to User Impersonation via the OAuth login process when using a provider that does not guarantee verified email addresses. An attacker can gain unauthorized access to existing user accounts, including those with elevated privileges, by...