github api-platform/core v4.2.26

latest releases: v4.3.13, v4.3.12
23 hours ago

🔒 Security

Fixes CVE-2026-54164 (GHSA-9rjg-x2p2-h68h) — type confusion: relation IRIs were not type-checked, so a writable relation could be assigned a resource of the wrong type.

  • fix(serializer): validate IRI target class on relation denormalization (6bcbeb2)

Full Changelog: v4.2.25...v4.2.26

Don't miss a new core release

NewReleases is sending notifications on new releases.