Threats tagged 'ghsa-g4xg-gv8m-6gxf'

A missing authorization check vulnerability in the visual alert feature of FlockOS, a hosted public safety platform, allowed authenticated users with permission to manage saved searches within their own organization to access and manipulate saved-search alerts of other organizations. This included reading, modifying, deleting alerts, changing recipients, and creating alerts attributed to other organizations. The issue was remediated by Flock on 2026-09-28 with no customer action required.