PT-2026-115653

countly-server is the server-side part of Countly, a product analytics solution. Prior to 24.05.50 and 25.03.44, the authenticated data-migration deletion route in plugins/data migration/api/api.js passes the user-controlled exportid to clean up data without path validation. plugins/data...