Miguel Ribeiro b75f13d0ff fix: harden oidc state validation and session rotation (#1071) ...

fix: account takeover via email-based account linking
fix: missing fields when cloning a subscription
fix: ssrf via oidc token/userInfo url configuration
fix: ssrf via test email notification
fix: zip slip path traversal in database restore writes files to webroot

2026-06-23 00:17:18 +08:00

15 KiB

Raw Permalink Blame History

View Raw