Important security update: This release fixes the PHP2Shell vulnerabilities in Movary's bundled PHP runtime. The vulnerable request handling occurs before Movary authentication and cannot be mitigated through application configuration.
All users should upgrade immediately. Docker users must pull the updated image and recreate their running containers; restarting a container using the previous image is not sufficient.
What's Changed
- Security: Fix PHP2Shell vulnerability by @leepeuker in #966
Full Changelog: 0.82.0...0.82.1