CVE-2026-107761 — Several Postiz endpoints return the complete database row of the record they operate on instead of only the f…
Several Postiz endpoints return the complete database row of the record they operate on instead of only the fields the client needs. Two of them include secrets the caller is not meant to receive. The public API's chann…