github saleor/saleor 3.16.20

latest releases: 3.19.54, 3.19.53, dataloader.test...
5 months ago

What's Changed

  • Fix INSUFFICIENT_STOCK error not returning order lines ids by @SzymJ in #15197
  • GHA: publish container images using GITHUB_TOKEN by @NyanKiyoshi in #15295
  • deps: update pillow, cryptography, jinja2 to latest by @NyanKiyoshi in #15302
    CVE fixes:
    • (cryptography) CVE-2023-49083: NULL-dereference when loading PKCS7 certificates.
    • (pillow) CVE-2023-50447: Arbitrary Code Execution in Pillow.
    • (pillow) No CVE: ImageFont.getmask: (2x) potential DoS.
    • (jinja2) CVE-2024-22195: vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter.
  • async webhooks: add extra data in failure logs by @NyanKiyoshi in #15314

Full Changelog: 3.16.19...3.16.20

Don't miss a new saleor release

NewReleases is sending notifications on new releases.