Threats affecting pkg:github/grida

Grida versions up to 0.0.24 have a missing authorization vulnerability in the Forms file-preview API routes. This flaw allows unauthenticated attackers to access form response files belonging to other organizations by leveraging exposed form and field IDs to generate signed URLs for attachments and Supabase bucket objects.