Threats affecting pkg:github/mereithhh/vanblog

VanBlog versions up to 0.54.0 have an authorization flaw allowing unauthenticated attackers to access private and hidden articles via the POST /api/public/article/:id endpoint. The vulnerability arises because the system does not properly verify the hidden status of articles and accepts any non-empty password for private articles without effective passwords, leading to information disclosure.