Skip to content

Commit 2c94dfb

Browse files
committed
Merge tag '0.8.2'
Hollo 0.8.2
2 parents cc7bbb0 + 1025724 commit 2c94dfb

1 file changed

Lines changed: 24 additions & 0 deletions

File tree

CHANGES.md

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -122,6 +122,17 @@ To be released.
122122
[#467]: https://github.com/fedify-dev/hollo/pull/467
123123

124124

125+
Version 0.8.2
126+
-------------
127+
128+
Released on May 5, 2026.
129+
130+
- Fixed a security vulnerability where the hashtag follow/unfollow API
131+
endpoints were missing an ownership filter, allowing a single authenticated
132+
request to modify followed tags for all account owners in the database.
133+
[[#429] by tomaioo]
134+
135+
125136
Version 0.8.1
126137
-------------
127138

@@ -309,6 +320,19 @@ Released on April 27, 2026.
309320
[#448]: https://github.com/fedify-dev/hollo/pull/448
310321

311322

323+
Version 0.7.14
324+
--------------
325+
326+
Released on May 5, 2026.
327+
328+
- Fixed a security vulnerability where the hashtag follow/unfollow API
329+
endpoints were missing an ownership filter, allowing a single authenticated
330+
request to modify followed tags for all account owners in the database.
331+
[[#429] by tomaioo]
332+
333+
[#429]: https://github.com/fedify-dev/hollo/pull/429
334+
335+
312336
Version 0.7.13
313337
--------------
314338

0 commit comments

Comments
 (0)