Skip to content

v2.2.8

Choose a tag to compare

View all tags
@TheMilek TheMilek released this 07 Jul 14:01
v2.2.8
This tag was signed with the committer’s verified signature.
TheMilek Kamil Grygierzec
GPG key ID: A3F43F426B5286AA
Verified
Learn about vigilant mode.
d1f7753
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

TL;DR

🔒 This is a security release!

Fixes the following vulnerabilities:

Details

  • Validate webhook payment against order and fix IDOR order token/PII leak by @TheMilek in #351

Full Changelog: v2.2.7...v2.2.8

Contributors

TheMilek
Assets 2
Loading