In affected versions of Octopus Deploy it is possible for a user to view Tagsets without being explicitly assigned permissions to view these itemsReferenceshttps://advisories.octopus.com/post/2023/sa2023-03/