GHSA-x249-cx55-2h87 — wger: Trainer Privilege Escalation – Improper Privilege Management

A user with only the gym_trainer permission can deactivate any account in the same gym, including gym_manager and general_gym_manager accounts.