[MEDIUM] Filament has inconsistent scope enforcement for its AttachAction and AssociateAction Select fields

PKSA-ndkp-2znf-9m7c CVE-2026-48067 GHSA-7q3w-xqjw-g3cr

Affected package: filament/actions

Affected version: >=5.0.0,<=5.6.3|>=4.0.0,<=4.11.3

Reported by:
GitHub