github arelate/vangogh v1.2.20

5 hours ago

This is a security fix that resolves GHSA-65c3-xq57-hcvr

Without the fix - users with User permission sets would be able to access gog-user-access-token through the API that would give them access to the admin GOG.com data. With this fix, only admins can access that data through the API.

Thank you @shai66 for reporting this issue!

Unrelated to this fix - this release also removes Demo role. It was broken for some time and will be even more broken (if not pointless) with the upcoming changes I'm working on.

Don't miss a new vangogh release

NewReleases is sending notifications on new releases.