IntenseWebs/PeerTube
3
0
Fork 0
mirror of https://github.com/Chocobozzz/PeerTube.git synced 2026-09-03 20:53:09 -05:00
Code Issues Packages Projects Releases Wiki Activity

Update changelog

Browse Source
This commit is contained in:
Chocobozzz
2026-05-20 16:02:10 +02:00
parent 6b3b43a318
commit 9f881d572c
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CHANGELOG.md
+2 -2
View File
@@ -27,8 +27,8 @@
### SECURITY
* Fix SQL injection coming from actor inbox URL when updating actor follow scores
* Reject JSON-LD objects with special properties
* Fix SQL injection coming from actor inbox URL when updating actor follow scores. Thanks to **Nagarajan Selvaraj Paulmony** for reporting this vulnerability :pray:
* Reject JSON-LD objects with special properties. Thanks to **Mastodon security team** for reporting this vulnerability :pray:
* Restricts role assignment to administrators only
* Prevent external auth token replay
* Prevent SSRF on import and channel sync