SA-CONTRIB-2009-011 Tasklist - SQL injection and Cross site scripting
This is a security release which only includes a change to add protection against cross site request forgeries.
For more information, see the security advisory http://drupal.org/node/406314.
SA-CONTRIB-2009-009 Forward module can be used as a spam relay
http://drupal.org/node/398564
Fixes SA-CONTRIB-2009-008.