Skip to content

2.0.48

Choose a tag to compare

View all tags
@engram-design engram-design released this 28 Sep 14:35
· 7 commits to craft-5 since this release
2.0.48
4abddb1

Fixed

  • Fixed a high-severity external identity verification vulnerability.
  • Fixed a high-severity OAuth callback integrity vulnerability.
  • Fixed OAuth callbacks retaining authority after the initiating Craft user loses access.
  • Fixed OAuth callbacks accepting unsigned external return URLs.
  • Fixed a high-severity external service transport vulnerability.
Assets 2
Loading