WRITEUP

This patch addresses an authorization bypass vulnerability in Mastodon's severed_relationships_controller.rb by ensuring that users can only access their own account relationship severance events. The fix adds a scope to the query to enforce ownership, and includes test cases to verify the behavior.