Skip to content

solidus_admin/v0.4.1

Choose a tag to compare

View all tags
@jarednorman jarednorman released this 07 Oct 15:54
· 3701 commits to main since this release
solidus_admin/v0.4.1
164a184

This is a security release. It contains only this fix on top of 0.4.0.

  • Fix stored cross-site scripting on the customer "Items Purchased" page. The
    product name, variant options and SKU were rendered as raw HTML. See
    GHSA-g9c8-3mxq-rpgh.

All stores using solidus_admin 0.3.0 through 0.4.0 should upgrade.

Assets 2
Loading