1.3.6

akondas released this 29 Nov 06:22

· 36 commits to master since this release

Security

Fix CVE-2021-41267: Webcache Poisoning via X-Forwarded-Prefix and sub-request symfony/security-bundle (v5.3.4)
Fix CVE-2021-41268: Remember me cookie persistance after password changes

What's Changed

Upgrade symfony to 5.3.12 by @akondas in #524
Upgrade all dependencies by @akondas in #526

Full Changelog: 1.3.5...1.3.6

Contributors

akondas

Assets 2