2.2.36
·
1749 commits
to craft-5
since this release
Fixed
- Fixed a moderate-severity information disclosure vulnerability. (GHSA-rh4q-6j5r-8jqf)
- Restrict Signature image responses to Signature fields without changing existing email image URLs.
- Fixed a moderate-severity authorization vulnerability. (GHSA-p696-447f-9258)
- Fixed a moderate-severity information disclosure vulnerability. (GHSA-963f-vfpf-f85p)
- Fix nested Group field variables causing email notifications to fail when conditional logic omits the Group value.