Skip to content

v5.0.7

Choose a tag to compare

View all tags
@github-actions github-actions released this 29 Jun 12:48
v5.0.7
2792ef5

= v5.0.7 ( Jun 29, 2026 ) =

  • fix: Prevented a DOM-based XSS in the legacy Vue admin by validating the vendor details and reverse-withdrawal route parameters.
  • fix: Enforced per-product ownership on the v3 products batch endpoint so vendors can no longer update or delete other vendors' products.

Full Changelog: v5.0.6...v5.0.7

Assets 3
Loading