Weaviate security release - Medium severity fix for a cross-collection vector disclosure in nearObject (CVE pending assignment) | Weaviate

Details a medium severity authorization vulnerability in the GraphQL `nearObject` search operator where a user could reconstruct the vector of an object in a collection they do not have permission to read. The attack vector involves using probe objects in a controlled collection to infer the protected vector's distance from objects in an unauthorized collection. The fix involves authorizing the beacon target before its vector is loaded at the shared vector lookup, ensuring consistent authorization checks across API surfaces.