Threats affecting pkg:github/dnsmgr

Netcccyun dnsmgr versions 2.18 through before 2.22 have a missing authorization vulnerability in the POST /cloudflare/get_domain_default_line endpoint. This flaw allows restricted sub-users or single-domain logins to enumerate domain IDs beyond their permissions and access DNS line lists and default lines for those domains. The vulnerability is fixed in version 2.22.