[CRITICAL] Ibexa DXP users with the Company admin role can assign any role to any user

PKSA-thcc-msg1-sncj GHSA-g6jc-xrc3-4wwq

Affected package: ibexa/admin-ui

Affected version: >=4.2.0,<4.2.3

Reported by:
GitHub