Thinline-Dynamic-Solutions/ThinLineRadio v26.04.025

v26.04.025 - Security: remove open test-pager-alert endpoint

on GitHub

Security Fix

Removed unauthenticated POST /api/admin/test-pager-alert endpoint

This route had no authentication — any caller with network access to the server could trigger real push notifications to any registered user. The route registration and handler have been removed entirely.

Deploy this update immediately if you are running v26.04.024 or earlier.