Skip to content

v3.1.2

Latest

Choose a tag to compare

@alxlion alxlion released this 22 Oct 07:54
· 5 commits to dev since this release

Security

馃毃 Critical security update: Please update to this version ASAP to avoid privilege escalation.

  • Prevent public signup from assigning privileged roles or bypassing email confirmation through client-supplied account fields.
  • Remove the unused slide-image export endpoint that passed client-supplied images to ImageMagick.
  • Prevent cross-event access to transcription controls and keep edited configurations bound to their authorized presentation.