Commit Graph

2 Commits

Author SHA1 Message Date
Florian Apolloner 20b9ad36ff [4.0.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.

Backport of d4dcd5b9dd from main.
2021-12-07 06:29:34 +01:00
Mariusz Felisiak 2fa95bfbd4 [4.0.x] Added stub release notes and release date for 3.2.10, 3.1.14 and 2.2.25.
Backport of ae4077e13e from main
2021-11-30 11:26:10 +01:00