Threats affecting pkg:github/LearnHouse

LearnHouse versions prior to 1.4.0 have a missing authorization vulnerability in the playground duplication API endpoint. Authenticated users with playground creation rights can duplicate restricted or unpublished playgrounds without proper read-access or draft checks, allowing them to copy and republish content publicly. This issue is fixed in version 1.4.0.