In the process of fixing one security issue, we ended up adding another one around bypass policies. This was only present for a very short period of time (2 point releases). But as always, security must be taken seriously. More details here: github.com/ash-project/as…
github.com Authorization bypass when bypass policy condition evaluates to true ### Summary Bypass policies incorrectly authorize requests when their condition evaluates to true but their authorization checks fail and no other policies apply. ### Impact Resources with byp... 
