[api.krisp.ai] Race condition on /v2/seats endpoint allows bypassing the original seat limit

Summary

Security researcher has found a race condition on one of our endpoints which was effectively bypassing maximum seats limit, We would like to thank @alp for reporting it responsibly to our bug bounty program !

I found a race condition issue at the /v2/seats endpoint. It allowed bypassing maximum seat limit. This issue was fixed by the Krisp team in ASAP. Thank @noisekiller and Krisp team for good work here.