[MEDIUM] SilverStripe Versioned Files module Unpublished files are exposed publicly

PKSA-m37x-vftk-zbzw CVE-2019-16409 GHSA-xm6j-x342-gwq9

Affected package: symbiote/silverstripe-versionedfiles

Affected version: <=2.0.3

Reported by:
GitHub