Rahoot

v3.0.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 21d Productivity & Wikis

✓ No known CVEs patched

This release patches 1 known CVE

Topics

learning quizz reactjs self-hosted typescript

Affected surfaces

auth rce_ssrf

Summary

AI summary

Fix prevents path traversal when creating games by enforcing manager authentication.

Full changelog

feat: add Japanese language support and translations by @HRTK92 in https://github.com/Ralex91/Razzia/pull/110
fix: enforce manager auth on game creation and prevent path traversal by @SystemVll in https://github.com/Ralex91/Razzia/pull/146

@HRTK92 made their first contribution in https://github.com/Ralex91/Razzia/pull/110
@SystemVll made their first contribution in https://github.com/Ralex91/Razzia/pull/146

Full Changelog: https://github.com/Ralex91/Razzia/compare/3.0.0...3.0.1

Fix enforces manager authentication on game creation, preventing directory path‑traversal vulnerabilities

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Rahoot

Get notified when new releases ship.

About Rahoot

Game-based learning platform