18.1.1

What's Changed

🔒 Security

• Resolved incorrect authorization lets Content-only backoffice users modify Templates, enabling remote code execution from GHSA-f7m5-5x7g-2p52
• Resolved insufficient authorization on Management API search endpoints from GHSA-w5q3-9wf8-43gg

🐛 Bug Fixes

• Routing: Don't retain the fallback default culture captured during an upgrade boot (closes #22581) by @AndyButland in #23653

Full Changelog: release-18.1.0-rc...release-18.1.1