Skip to content

v5.16.2

Choose a tag to compare

View all tags
@kjmartens kjmartens released this 24 Sep 14:30
· 17 commits to v5 since this release
v5.16.2
This tag was signed with the committer’s verified signature.
kjmartens Kelsey Martens
GPG key ID: AE405245AE9FE191
Verified
Learn about vigilant mode.
c3ea0d2
This commit was signed with the committer’s verified signature.
kjmartens Kelsey Martens
GPG key ID: AE405245AE9FE191
Verified
Learn about vigilant mode.

Security

  • Fixed a security issue in GraphQL file uploads by URL that could allow requests to internal network addresses and bypass a field's allowed file extensions. Remote downloads now validate destinations, reject redirects, and enforce the file size limit.
Assets 2
Loading