Threats affecting pkg:github/Warracker

Warracker versions before 1.0.4 have a missing authorization vulnerability in the Paperless-ngx integration. Authenticated non-administrative users can bypass document ownership restrictions by linking another user's private document ID to their own warranty using the 'other' document type. This allows unauthorized read access to private documents via insufficient authorization checks in specific route handlers.