graphql 8.x-3.4

Security update

Security release of GraphQL fixing a CSRF vulnerability and an access bypass in entity label handling, see:

  1. GraphQL - Moderately critical - Access bypass - SA-CONTRIB-2023-050
  2. GraphQL - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2023-051

We recommend the following additional security measures:

graphql 8.x-4.6

Security update

Security release of GraphQL fixing a CSRF vulnerability and an access bypass in entity label handling, see:

  1. GraphQL - Moderately critical - Access bypass - SA-CONTRIB-2023-050
  2. GraphQL - Moderately critical - Cross Site Request Forgery - SA-CONTRIB-2023-051

We recommend the following additional security measures:

mail_login 8.x-2.9

Security update
Bug fixes

Changelog

Changes since 8.x-2.8

  • Flood control not blocking users correctly.
  • Issue #3387222 Unexpected error too few arguments after update to 8.x-2.8

Pages

Subscribe with RSS Subscribe to RSS - Security update