Version 1.4.3

coudot released this 12 May 15:38

· 20 commits to 1.4 since this release

Some bug fixes for version 1.4:

#516: Docker image does not have sendmail in it
#517: fix(mail): add sendmail to Docker image
#520: [Security:high] Reset by SMS can be used to change any account password
#521: If token was provided by SMS, check initial SMS code before changing password
#522: [Security:low] Dismiss captcha once it is used

⚠️ Some fixes concern security issues, please upgrade as soon as possible

Please read release notes from https://github.com/ltb-project/self-service-password/releases/tag/v1.4

Assets 2