[HIGH] Winter: Authenticated backend users can bypass Users controller permission checks

PKSA-kh9g-dm85-trgm CVE-2026-35445 GHSA-j5jq-cr68-v2xx

Affected package: winter/wn-backend-module

Affected version: <=1.2.12

Reported by:
GitHub