diff options
| author | Rodrigo Osorio <rodrigo@FreeBSD.org> | 2026-11-01 14:27:54 +0000 |
|---|---|---|
| committer | Rodrigo Osorio <rodrigo@FreeBSD.org> | 2026-11-01 14:33:52 +0000 |
| commit | c2e8896179e8aa64b7b042dd8d4da3dc2d71bead (patch) | |
| tree | 2342e1def20b6023e2da7da5711546b52752ae0f /net-im/rubygem-hipchat | |
| parent | f489ca51645acf288340ed9d91a6d326d1099fb0 (diff) | |
Changelog:
https://github.com/s9y/Serendipity/releases/tag/2.6.0
https://github.com/s9y/Serendipity/releases/tag/2.6.1
Security: A critical bug in the username logic, allowing existing usernames to be duplicated and to capture the rights of existing accounts
Security: XSS injection vector on the search page, the search term was not properly (or rather, twice) escaped
Security: An outdated blacklist for downloads into the media library, making network resources available that ought to be blocked.
Security: An open redirect in exit.php when the trackexit plugin was installed and the blog used for URL redirects via an option in the plugin
Diffstat (limited to 'net-im/rubygem-hipchat')
0 files changed, 0 insertions, 0 deletions
