Advisories for Gem/Decidim-Verifications package

Scanned identity-document images provided by participants and shown in the verification admin workflow are exposed through signed /rails/active_storage/disk/ URLs that can be fetched without any authenticated session. Anyone who obtains one of those URLs can retrieve the document until the signature expires.

The verification admin mutation flow allows accessing, verifying, and rejecting participants records from another tenant.

A participant manager can access and modify the CSV census record admin forms.