Threats affecting pkg:github/frab/frab

frab versions up to 0.9.1 have a privilege escalation vulnerability that allows authenticated crew users to escalate their privileges to organizer roles by exploiting unchecked nested conference user attributes. This flaw enables attackers to gain full management control over any conference, including events, schedules, reviewers, and crew.