Skip to content

Daytona: Cross-org IDOR in organization role update/delete — any org owner can rewrite or destroy another org's roles

High severity GitHub Reviewed Published Jun 9, 2026 in daytonaio/daytona • Updated Jun 16, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts