Miguel Ribeiro e79f28be6b fix: ssrf vultenaribility on add subscription (#1038) ...

fix: only allow to use internal urls csrf validation bypass by admin user
fix: dns rebinding vulnerability

2026-04-18 16:57:46 +02:00

..

admin

fix: ssrf vulnerability on all test notifications endpoint

2026-03-05 23:13:51 +01:00

ai

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

categories

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

cronjobs

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

currency

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

db

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

household

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

logos

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

notifications

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

payments

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

settings

feat: enforce CSRF protection and POST-only policy across endpoints (#940)

2025-10-18 23:58:50 +02:00

subscription

fix: ssrf vultenaribility on add subscription (#1038)

2026-04-18 16:57:46 +02:00

subscriptions

fix: localization on date on browsers not in english

2025-04-16 21:30:14 +02:00

user

fix: session expiration on pwa on android (#1023)

2026-03-21 18:05:59 +00:00