Skip to content

Release v2.11.4 - #154

Merged
Coderberg merged 6 commits into
masterfrom
2.x
Sep 21, 2026
Merged

Coderberg merged 6 commits into
masterfrom
2.x

Conversation

@Coderberg

@Coderberg Coderberg commented Sep 21, 2026 •

Copy link
Copy Markdown
Owner
  • Fixed stored XSS on the public map view (/map)
  • Upgraded to Symfony 7.4 LTS to address dependency CVEs
  • Enhanced composer audit configuration for abandoned packages

Reported by Mihai Ungureanu (@tfwcodes).

Coderberg and others added 6 commits April 13, 2025 16:16
Coordinates were interpolated into inline JavaScript without
JS-context encoding. Markers are now passed as JSON and
coordinates are validated server-side.

Reported by Mihai Ungureanu (@tfwcodes).
Co-authored-by: Cursor <cursoragent@cursor.com>
@Coderberg
Coderberg merged commit e87f473 into master Sep 21, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant