Threats affecting pkg:github/ryot

IgnisDa ryot versions prior to 10.5.6 contain an authorization bypass vulnerability that allows authenticated users to delete entries from other users' collections by manipulating collectionName and creatorUserId parameters. This flaw enables attackers to target fixed collection names such as Watchlist and remove collection_to_entity rows belonging to other users. The vulnerability is fixed in version 10.5.6.

Ryot versions before 10.5.6 have an authorization bypass vulnerability in the createOrUpdateCollection GraphQL mutation. Authenticated users can supply an updateId to take over other users' collections without proper authorization checks. This allows attackers to read collection items, modify metadata, and remove the original owner and collaborators.

IgnisDa ryot versions before 10.5.6 contain an authorization bypass vulnerability that allows authenticated users to revoke access links belonging to other users. This occurs because the application does not verify ownership when revoking access links, enabling attackers to disrupt shared access by supplying arbitrary accessLinkIds obtained from public share URLs. The issue is fixed in version 10.5.6.