[MEDIUM] ai-admin-graphql has a Denial of service vulnerability in SaaS and marketplace setups

PKSA-b4t6-wwyk-w97p CVE-2024-47173 GHSA-qxgx-hvg3-v92w

Affected version: >=2024.04.1,<2024.07.2

Reported by:
GitHub

[LOW] aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

PKSA-xds6-pybz-xkzh CVE-2024-39324 GHSA-jj68-cp4v-98qf

Affected version: =2024.04.1|>=2023.04.1,<2023.10.6|>=2022.04.1,<2022.10.10

Reported by:
GitHub

[HIGH] aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

PKSA-6xzg-vxv4-r333 CVE-2024-39323 GHSA-vc7j-99jw-jrqm

Affected version: >=2024.04.1,<2024.04.6|>=2023.04.1,<2023.10.6|>=2022.04.1,<2022.10.10

Reported by:
GitHub