Threats tagged 'ghsa-f8r5-g6fq-qg96'

Ryot versions before 10.5.6 have an authorization bypass vulnerability in the createOrUpdateCollection GraphQL mutation. Authenticated users can supply an updateId to take over other users' collections without proper authorization checks. This allows attackers to read collection items, modify metadata, and remove the original owner and collaborators.