2025-03-15

Fixed

• Security issue with remember me key in auth. See: https://chmod744.super.site/redacted-vulnerability.
• Security issue CVE-2024-50345: CVE-2024-50345: Open redirect via browser-sanitized URLs. See: https://symfony.com/cve-2024-50345.

2025-03-15

Fixed

• Security issue CVE-2024-51736: Command execution hijack on Windows with Process class. See: https://symfony.com/cve-2024-51736.

2024-05-04

Added

• Support of PHP 8.2 and 8.3 in GitHub Actions.

Fixed

• Security issue with remember me key in auth. See: https://chmod744.super.site/redacted-vulnerability.

2024-05-04

Added

• GitHub Actions pipeline (backport from v2.1) + support of PHP 8.2 and 8.3.

Fixed

• Security issue with remember me key in auth. See: https://chmod744.super.site/redacted-vulnerability.

2024-01-11

Fixed

• Updated dependencies. Fixed:
  • guzzlehttp/psr7 (1.9.0) | CVE-2023-29197: Improper header validation | GHSA-wxmh-65f7-jcvw.

2024-01-11

Fixed

• Updated dependencies. Fixed:
  • guzzlehttp/psr7 (1.9.0) | CVE-2023-29197: Improper header validation | GHSA-wxmh-65f7-jcvw.

2023-01-11

Fixed

• PHP 8.1 deprecation while searching for composer binary. Pull request #434.
  Thanks to @StudioMaX.
• PHP 8.1 error with return type of php_user_filter::filter function.

2023-01-11

Fixed

• PHP 8.1 deprecation while searching for composer binary. Pull request #434.
  Thanks to @StudioMaX.
• PHP 8.1 error with return type of php_user_filter::filter function.

2022-09-01

Fixed

• Build logger expression. Pull requests #431. Thanks to @StudioMaX.
• Type of GET param commitId in WebhookController. Issue #432.
• Webhook response type. Issue #432.
• Secrets security: denied to using secrets in notify plugins content.

2022-08-30

Fixed

• php-censor/common package version.
• Logging with secret variables (Now secrets hides from log).
• Secrets validation.