restws 7.x-2.10
7.x-2.10
Advanced PWA - Critical - Access bypass - SA-CONTRIB-2024-017
Improved permissions for the admin settings form.
rest_views 3.0.1
REST Views - Moderately critical - Information Disclosure - SA-CONTRIB-2024-018
This release ensures that access is properly checked for rest views displays.
3.0.1
tacjs 8.x-6.5
8.x-6.5
registration_role 2.0.1
See Registration role - Critical - Access bypass - SA-CONTRIB-2024-015.
This release ensures that, even if configuration does not ever get updated to the new schema as expected, only the expected roles are granted to new registrants.
If you cannot update right away, simply re-save the configuration form at /admin/people/registration-role and your configuration will be fixed, even without this release.
2.0.1
symfony_mailer_lite 1.0.6
Security updates Fixes: Drupal Symfony Mailer Lite - Moderately critical - Cross site request forgery Other changes since 1.0.5: Bug Fixes #3422014 by threeg: "Ping threshold" option doesn't reflect its set value
1.0.6
coffee 8.x-1.4
Maintenance release to fix XSS vulnerability, see Coffee - Moderately critical - Cross Site Scripting - SA-CONTRIB-2024-011.
No other changes since 8.x-1.3
8.x-1.4
private_content 8.x-2.1
8.x-2.1
node_access_rebuild_progressive 2.0.2
Node Access Rebuild Progressive - Less critical - Access bypass - SA-CONTRIB-2024-010
Contributors (3)
dwebpoint, jordan.haber, justcaldwell
Changelog
Issues: 1 issues resolved.
2.0.2