🚨 CVE-2026-70547
An authenticated user without repository read permission may access package metadata under specific conditions.