Threats tagged 'ghsa-grg2-jmjg-xf7x'

Zipline versions prior to 4.7.0 have a race condition vulnerability that enables users to bypass limits on invitation usage, upload storage, and shortened-URL creation by making concurrent requests. This flaw allows attackers to circumvent checks based on stale state, resulting in creation of extra accounts and exceeding resource quotas set by administrators.