Skip to content

v4.7.1 - Security & Test Fixes

Choose a tag to compare

View all tags
@tallcms tallcms released this 18 Jul 15:05
· 12 commits to main since this release
v4.7.1
edaea0c

Security

  • Bumped guzzlehttp/guzzle (7.10.5 → 7.15.1) and guzzlehttp/psr7 (2.10.4 → 2.13.0), resolving 3 medium-severity advisories:
    • Silent HTTPS-proxy downgrade to cleartext
    • CRLF injection in HTTP start-line serialization
    • Dot-only cookie domains matching all hosts

Fixes

  • Fixed a stale URL in SiteContentScopingTest (multisite plugin settings page is registered at multisite-settings, not site-settings) — test-only, no runtime behavior change.

No new features in this release. Follows up on v4.7.0.

Assets 5
Loading