The security issue is caused by a mishandling of boolean access callbacks when OG Features overrides all menu items. Boolean access callbacks in menu items that are explicitly set to FALSE will be open for access.
Backport of branch 7.x-4.x sponsored by myristo.it
- the module can now use views to create suggestion via the "JSON autocomplete" sub-module
- suggestions can be multi-field and use HTML markups
- suggestions support grouping
- new CSS themes offered