Threats tagged 'ghsa-qfwg-v76j-m6gm'

CVE-2026-14242 is a vulnerability where a user assigned the Editor role can delete, move, push, or pull Git Sync managed resources in folders where they only have view access. This occurs because the provisioning job created through the jobs resource API bypasses folder permission checks, leading to incorrect authorization.