Skip to content

Forge v1.0.7

Choose a tag to compare

View all tags
@Docteur-Parfait Docteur-Parfait released this 19 Sep 12:15
· 73 commits to main since this release
v1.0.7
c43e087
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

Fixes account pre-hijacking via unverified email registration (GHSA-mr93-xxxp-fc3f).

On first email verification, Forge now clears the registration password and bumps token_version. Victims can set a new password from Settings or via forgot-password.

Credit: @waytogold17

Contributors

waytogold17
Assets 2
Loading