Skip to content

v7.5.2

Choose a tag to compare

@g-dom3 g-dom3 released this 03 Aug 08:33
· 4 commits to master since this release
  • August 3rd, 2026
  • Security: Fixed a PHP Object Injection vulnerability in the cookie banner settings.
  • Security: The consented-content REST endpoint no longer returns content of password-protected posts.
  • Security: Hardened the YouTube integration against SSRF — server-side fetches are restricted to YouTube hosts.