Important
Security fix. In v4.0.0 to v4.1.8, a request with a percent-encoded path, for example /%61pi/v4/monitors, reached every /api/v4 route without an API key. Upgrade now, then follow the steps in the v4.1.9 changelog.
What's Changed
- docs(security): add security policy for private vulnerability reports by @rajnandan1 in #900
- docs: add Groundmail SMTP example by @Ktryberceo in #898
- fix(api): decide the API key check from the matched route, not the raw path by @rajnandan1 in #903
New Contributors
- @Ktryberceo made their first contribution in #898
Full Changelog: v4.1.8...v4.1.9