11.0.309

adubovikov released this 06 Aug 15:00

3604c02

What's Changed

fix(security): block self-assigned admin role (GHSA-24vc-w334-95wm) by @adubovikov in #920
chore: bump version to 11.0.308 by @adubovikov in #919

Security: authenticated users can no longer escalate to admin via PATCH /api/v4/users/:id with user_group.

Full Changelog: 11.0.308...11.0.309

Contributors

adubovikov

Assets 8