Skip to content

5.130.6

Choose a tag to compare

View all tags
@Ghost-Slimer Ghost-Slimer released this 08 Jan 12:41
· 1284 commits to main since this release
v5.130.6
a07c753
  • 🔒 Fixed staff token authorization bypass via trailing slash mismatch (#25805) - Michael Barrett
  • 🔒 Fixed potential SSRF via media inliner (#25807) - Michael Barrett
  • 🔒 Fixed SQL injection vulnerability in click event query (#25804) - Michael Barrett
  • 🔒 Fixed ability to bypass Staff User 2FA flow (#25806) - Michael Barrett

View the changelog for full details: v5.130.5...v5.130.6

Assets 2
Loading