Threats tagged 'ghsa-frgf-wpx9-58c9'

A missing authorization vulnerability in kanbn's kan product up to version 0.6.0 allows unauthorized users to create boards via the GitHub project import endpoint. This occurs because the importProjects mutation does not properly validate board creation permissions, enabling guests to bypass the intended board:create permission checks.