Skip to content

5.0.5

Latest

Choose a tag to compare

@rhukster rhukster released this 05 Aug 16:48

Bugfix

  • [security] On Grav 2.0, email settings can no longer read your site, system or theme configuration directly, which was a way around the restriction added in 5.0.4 that already stopped them reading it through config (GHSA-p597-crqc-m349). Requires Grav 2.0.16 or later, which is also where the underlying protection for email settings lives.