[WEB-8353] fix(security): enforce guest issue visibility on attachments + activity - #9467

Open

mguptahub wants to merge 4 commits into

secur-243/issue-subresource-idorfrom

web-8353/guest-issue-subresource-scope

Commits on Sep 28, 2026

[WEB-8353] fix(security): enforce guest issue visibility on attachments + activity (GHSA-wq96-4xjj-j4qg)

mguptahub
and
claude
committed
cfeeca7
[WEB-8353] fix(security): extend guest visibility to attachment writes + scope activity to project (Copilot/CodeRabbit #9467)

mguptahub
and
claude
committed
c750eb0
chore(security): drop advisory identifiers from code comments

mguptahub
and
Plane AI
committed
f39ad50
[WEB-8353] fix(security): extend guest issue visibility guard to comments + reactions

mguptahub
and
Plane AI
committed
50b72e9