revel-backend

v1.62.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Productivity & Wikis

✓ No known CVEs patched

This release patches 1 known CVE

ReleasePort's take

Moderate signal

editorial:auto 1mo

Release v1.62.1 adds manual referral CRUD endpoints for admins and patches dependency CVEs.

Why it matters: Patches dependency CVEs (severity 90) affecting runtime dependencies; new admin‑only referral CRUD improves operational control.

AI summary

Added manual referral CRUD endpoints for admins and patched dependency CVEs.

Type	Severity	Summary	CVE
Security	Critical	Patches dependency CVEs (specific IDs not listed). Patches dependency CVEs (specific IDs not listed). Source: llm_adapter@2026-06-08 Confidence: high	—
Feature	Medium	Adds manual referral CRUD in admin interface. Adds manual referral CRUD in admin interface. Source: llm_adapter@2026-06-08 Confidence: high	—

Full changelog

feat(accounts): manual referral CRUD in admin + dep CVE patches (#473) by @biagiodistefano in https://github.com/letsrevel/revel-backend/pull/474

Full Changelog: https://github.com/letsrevel/revel-backend/compare/v1.62.0...v1.62.1

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track revel-backend

Get notified when new releases ship.

About revel-backend

The Django backend of the Revel event platform project

v1.72.1 Makes payment base fields (`amount`, `currency`, `platform_fee`) read-only
v1.72.1 Restricts organization ownership transfer to superusers only
v1.71.0 Checkout flow now uses a two-step reserve then session creation process.
v1.68.0 check-in endpoint path renamed to use ticket code (UUID or series:<uuid>) instead of ticket ID.