Skip to content

Kanboard 1.2.55

Choose a tag to compare

View all tags
@fguillot fguillot released this 21 Oct 00:57
· 2 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.2.55
e4fb64e

Security fixes

  • Prevent spoofed client IP addresses in trusted-proxy headers from bypassing IP-based CAPTCHA and login lockouts
  • Restrict dashboard and overdue-task queries to projects a user can still access
  • Enforce project authorization when closing board columns, reordering subtasks, and duplicating tasks between projects
  • Require the project-manager role to modify project metadata through the API
  • Validate and escape color IDs and project names to prevent cross-site scripting
  • Limit iCalendar start-date fields to supported task columns

Improvements

  • Add support for uploading and previewing WebP image attachments
  • Allow API clients to set a validated project member as the creator of task and project attachments
  • Add Azerbaijani interface translations and improve Swedish translations

Bug fixes

  • Preserve session cookies when Kanboard is installed in a subdirectory
  • Enable notifications for automatically created LDAP users when notifications are enabled by default
  • Return a complete JSON-RPC batch response when an individual request is forbidden

Maintenance

  • Harden GitHub Actions workflows with read-only job tokens and without persisted checkout credentials

Dependencies and build

  • Update several GitHub Actions dependencies
Assets 3
Loading