Skip to content

v4.95.2

  • v4.95.2
  • 70ce92e

  • Verified

    This commit was signed with the committer’s verified signature.
    Robinvm Robin van Maasakker
    SSH Key Fingerprint: Bp5/dom5ZwS6/glWK9SjqD9QyDysCq/hxwkMOkmNP/Q
    Verified
    Learn about vigilant mode

  • Choose a tag to compare

    View all tags
v4.95.2: fix(security): no alert mail for a refused admin password reset
  • v4.95.2
  • 70ce92e

  • Choose a tag to compare

    View all tags

  • Verified

    This commit was signed with the committer’s verified signature.
    Robinvm Robin van Maasakker
    SSH Key Fingerprint: Bp5/dom5ZwS6/glWK9SjqD9QyDysCq/hxwkMOkmNP/Q
    Verified
    Learn about vigilant mode
@Robinvm Robinvm tagged this 27 Oct 07:39 
With admin password reset disabled nothing is sent, so the security alert
was pure noise: bots walking the forgot-password form produced a mail per
attempt. The request is now only recorded in the login log as
reset_refused; the alert still goes out when a reset link is sent.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HQraDEcMVvjrjWtLq7tVtf
Assets 2
Loading