0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-04-15 03:01:37 -05:00
ghost/core
Fabien O'Carroll 944c2cc9af
🔒 Fixed member email change vulnerability
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr

This updates the signup/signin flow for members to no longer support the
email address change flow - which had missing authentication. It has
been replaced with a dedicated email change flow, and Portal has been
updated to use it.
2021-09-23 10:49:30 +01:00
..
client@2a06f299a8 Updated Admin to v4.15.0 2021-09-17 16:58:45 +01:00
frontend 🐛 Fixed error in sitemap with >50k posts (#13317) 2021-09-17 11:13:42 +01:00
server 🔒 Fixed member email change vulnerability 2021-09-23 10:49:30 +01:00
shared 🔒 Fixed member email change vulnerability 2021-09-23 10:49:30 +01:00
app.js Added Sentry to new boot process 2021-02-19 09:20:41 +00:00
boot.js Added email unfreeze for verified email config 2021-07-29 20:30:30 +12:00
bridge.js Added comments to all usages of lib/common/events 2021-07-07 16:02:44 +01:00