1 matches found
CVE-2026-24791: Incorrect Authorization
Public-only tokens bypass private-resource restrictions on /api/v1/user self routes...