v7.5.2
- August 3rd, 2026
- Security: Fixed a PHP Object Injection vulnerability in the cookie banner settings.
- Security: The consented-content REST endpoint no longer returns content of password-protected posts.
- Security: Hardened the YouTube integration against SSRF — server-side fetches are restricted to YouTube hosts.