fix(security): enforce ACL permission check in OAuth2 callback datasource lookup (GHSA-rg2x-4v4h-g78w)#41640

Merged

subrata71 merged 3 commits intoreleasefrom

cursor/application-security-vulnerability-8b0d

Mar 23, 2026

Commits on Mar 20, 2026

fix(security): enforce ACL permission check in OAuth2 callback datasource lookup

cursoragent
and
subrata71
committed
fix: add missing AuthorizationCodeCallbackDTO import in test

cursoragent
and
subrata71
committed
test: replace non-existent datasource test with real ACL-denied datasource test

cursoragent
and
subrata71
committed