PT-2026-106213

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the delete-share-link RPC where the system verifies only if the caller has permission to edit the parent file, failing to confirm if the caller created the share link or possesses...