3.98.3-beta.0 (2026-08-02)
Bug Fixes
- security: authz/ownership gaps (token binding, auth revocation, feedback/customer ownership, token logging) (#950) (c2ce12c)
- security: neutralize spreadsheet formulas in all CSV/export cell-writers (CSV injection cluster) (#948) (8f91c2c)
- security: redact gallery share tokens from analytics tracking (GHSA-7m6c) (#952) (1c8f7d5)
- security: unauth share_token leak (HIGH) + restore path-traversal, logo file-read, branding path keys (#946) (9050aff)