Skip to content

v3.98.3-beta.0

Pre-release
Pre-release

Choose a tag to compare

View all tags
@the-luap the-luap released this 02 Aug 18:25
v3.98.3-beta.0
acd6b45
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

3.98.3-beta.0 (2026-08-02)

Bug Fixes

  • security: authz/ownership gaps (token binding, auth revocation, feedback/customer ownership, token logging) (#950) (c2ce12c)
  • security: neutralize spreadsheet formulas in all CSV/export cell-writers (CSV injection cluster) (#948) (8f91c2c)
  • security: redact gallery share tokens from analytics tracking (GHSA-7m6c) (#952) (1c8f7d5)
  • security: unauth share_token leak (HIGH) + restore path-traversal, logo file-read, branding path keys (#946) (9050aff)
Assets 2
Loading