ApostropheCMS before 4.33.0 allows authentication bypass for REST API page reading, as demonstrated by a /api/v1/@apostrophecms/page?all=1 call.Referenceshttps://github.com/apostrophecms/apostrophe/security/advisories/GHSA-2j32-q6rx-h844