Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in ...