- ⚠️ SECURITY UPDATE: Fixed four vulnerabilities found in our own code review:
- A low-severity XSS vulnerability with SVG images opened from asset and entry previews.
- A medium-severity vulnerability in the Editorial Workflow with the GitLab backend that allowed unreviewed changes from a fork to be published.
- A low-severity vulnerability that allowed content to restyle or cover the CMS through Markdown previews and entry summaries.
- A low-severity ReDoS vulnerability that allowed content to freeze the CMS when sorting entries or looking up asset references.
- Signing out now removes the API keys and credentials for integrations, such as translation services and cloud storage, from the device.
- Bug fixes and performance improvements.
As always, we recommend using the latest version of Sveltia CMS to benefit from improvements.
Full Changelog: v0.221.6...v0.221.7