Skip to content

2.0.21

Latest
Latest

Choose a tag to compare

View all tags
@supun-io supun-io released this 22 Oct 09:44
2.0.21
000df91
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

⚠️ Security release

This release upgrades the bundled PHP version to 8.4.27, which fixes two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619). Either vulnerability could allow an unauthenticated attacker to execute arbitrary code on the server.

If you self-host Hyvor Blogs, please upgrade to this version as soon as possible. If you use the hyvor-blogs-docker package, upgrade it to 0.0.5 as well.

For details on the vulnerabilities and how we responded, see our incident report and PHP's security advisory.

What's Changed

  • fix: php vulnerability by @Nadil-K in #956
  • chore: upgrade frankenphp to 1.13.1, revert Caddyfile workaround by @Nadil-K in #957

Full Changelog: 2.0.18...2.0.21

Contributors

Nadil-K
Assets 3
Loading