fix: Custom object ID allows to acquire role privileges (GHSA-8xq9-g7ch-35hg)#9317

Merged

mtrezza merged 12 commits intoparse-community:alphafrom mtrezza:pr/1

Oct 3, 2024

+57

Commits on Sep 26, 2024

Fix GHSA-8xq9-g7ch-35hg /CVE-2024-47183 by checking _User objects' custom object ids
mstniy
committed

Commits on Sep 27, 2024

Merge branch 'alpha' into advisory-fix-1
mstniy
authored

Commits on Sep 28, 2024

Refuse to honor the existing sessions for users with poisoned object ids
mstniy
committed