Skip to content

v6.4.49

Choose a tag to compare

@fabpot fabpot released this 28 Oct 18:17
· 264 commits to 8.2 since this release
Immutable release. Only release title and notes can be modified.
v6.4.49

Changelog (v6.4.46...v6.4.49)

  • security #cve-2026-45070 Reject parameter names containing non-token characters (@alexandre-daubois)
  • bug #67478 Escape backslashes in Address::getEncodedName() (@munzzyy)
  • bug #67444 Escape quotes and backslashes in quoted parameter values (@wleeaf)

[SECURITY] Security release