What's Changed
🔒 Security
- Resolved authorization bypass allows low-privileged users to delete media outside their start node from GHSA-7pj9-jmp9-p86q
- Resolved backoffice users can read content outside their start node via the document version endpoints from GHSA-w5jr-cmfx-544x
- Resolved unauthenticated SignalR hubs disclose content identifiers and editorial activity from GHSA-4c5q-6c64-96j7
- Resolved upload file extension restrictions are not enforced for file names ending in a period from GHSA-7pj9-jmp9-p86q
Full Changelog: release-18.2.0...release-18.2.1