Skip to content

3.8.13

Choose a tag to compare

View all tags
@rhukster rhukster released this 14 Jul 22:10
· 21 commits to master since this release
3.8.13
531cd45
This commit was signed with the committer’s verified signature.
rhukster Andy Miller
GPG key ID: 9F2CF38AEBDB0AE0
Verified
Learn about vigilant mode.

Bugfix

  • [security] Remember Me login tokens now actually expire after the configured timeout, closing a gap where a captured cookie stayed valid indefinitely instead of the default 7 days (GHSA-mj78-8gwc-vxjj). Thanks to chakrapani150 for the report.
Assets 2
Loading