[MEDIUM] nova-toggle-5: Improper authorization on toggle endpoint allowed non-Nova users to modify boolean fields

PKSA-bty3-jphf-3n5y CVE-2026-42202 GHSA-f5c8-m5vw-rmgq

Affected package: almirhodzic/nova-toggle-5

Affected version: <1.3.0

Reported by:
GitHub