| Package | Affected versions | Patched versions |
|---|---|---|
| data.all | ≥ 1.0.0, < 2.6.1 | 2.6.1 |
Due to inconsistent authorization permissions, data.all may allow an external actor with an authenticated account to perform restricted operations against DataSets and Environments.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free