Missing Authorization

Overview @budibase/worker is a Budibase background service Affected versions of this package are vulnerable to Missing Authorization in the GET /api/global/groups endpoint, which lacks proper role-based access control. An attacker can access sensitive group and role mapping information by sending...