Unreleased Hackerone Copilot is vulnerable to IDOR