AIKIDO-2026-10280

TL;DR

Affected versions of this package are vulnerable to a privilege escalation vulnerability stemming from improper token validation. An attacker who obtains a valid token for a low-privileged or benign action could reuse that token to bypass authorization checks. The fix resolves this issue by tracking remaining token usages and ensuring that a token's assigned route strictly matches the requested route before granting access.