1. GitHub Security Flaw: Authorization Bypass in Analysis & Composite Controllers Enables Data Enumeration
A critical authorization bypass flaw in a GitHub-hosted codebase allows unauthenticated attackers to enumerate valid dataset IDs, exposing a significant data enumeration vulnerability. The security issue stems from contradictory access control configurations in key API controllers, effectively disabling authentication ...