Instatic (< 0.0.21)

Instatic versions prior to 0.0.21 contain an authorization bypass vulnerability allowing authenticated users with limited permissions to read and modify system-table rows via direct API interaction.