[MEDIUM] Pixelfed may allow unauthorized actor to view private posts

PKSA-1q5n-7dm3-hpym CVE-2023-0914 GHSA-qh6w-pq52-qxxq

Affected package: pixelfed/pixelfed

Affected version: <=0.11.4

Reported by:
GitHub