This release includes 1 security fix for security teams reviewing exposed deployments.
Topics
+12 more
Affected surfaces
ReleasePort's take
Light signalRelease v5.73.23 fixes a token path traversal vulnerability and adds several other bugfixes.
Why it matters: The release patches the token path traversal security flaw (severity 50) that could allow unauthorized access; operators should upgrade immediately to mitigate risk.
Summary
AI summaryFixed token path traversal vulnerability.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Hardens `DataCollection` sort value resolution to prevent misuse. Hardens `DataCollection` sort value resolution to prevent misuse. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Bugfix | Medium |
Authorizes access to relationship fieldtype data. Authorizes access to relationship fieldtype data. Source: llm_adapter@2026-05-23 Confidence: high |
— |
| Bugfix | Medium |
Fixes token path traversal vulnerability. Fixes token path traversal vulnerability. Source: llm_adapter@2026-05-23 Confidence: low |
— |
| Bugfix | Medium |
Fixes asset fieldtype icon display issue. Fixes asset fieldtype icon display issue. Source: llm_adapter@2026-05-23 Confidence: low |
— |
Security Fixes
- Fix token path traversal — prevents directory traversal attacks via tokens [#14700]
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]