Fix CVE-2025-63783: Add authorization checks to project mutation APIs#3062

Merged

drfarrell merged 3 commits intomainfrom

fix-cve-2025-63783-idor

Dec 14, 2025

Commits on Dec 14, 2025

Fix CVE-2025-63783: Add authorization checks to project mutation APIs

drfarrell
and
claude
committed
Add authorization check to captureScreenshot and fix information disclosure

drfarrell
and
claude
committed
Fix TOCTOU race condition in delete and consistent error handling in captureScreenshot

drfarrell
and
claude
committed