GHSA-x5cx-w6p2-mxf2

Affected versions of the Wagtail package are vulnerable to Improper Permission Handling due to inadequate access control checks when copying snippets. The `copy` operation allows users with only "add" permissions to duplicate snippets without verifying if they possess "change" or "view" permissions, thereby exposing snippet contents. An attacker with "add" permissions can exploit this vulnerability to access and view the contents of snippets they are not authorized to see, potentially leading to unauthorized information disclosure.