This release includes 1 security fix for security teams reviewing exposed deployments.
Published 1mo
Productivity & Wikis
✓ No known CVEs patched
This release patches 1 known CVE
Topics
laravel
self-hosted
time-tracker
time-tracking
timetracker
timetracking
+2 more
timetrackingapp
vue
Summary
AI summaryCross-organization time-entry modification vulnerability fixed.
Full changelog
[!NOTE]
This release includes security fixes, please make sure to upgrade as soon as possible.
What's Changed
- fix cross-organization modification of a known time-entry UUID thanks @pyuysig for the report
- Prefill project name in create modal by @ShrootBuck in https://github.com/solidtime-io/solidtime/pull/1045
- Added the ability to disable group similar time entries by @utlark in https://github.com/solidtime-io/solidtime/pull/1054
New Contributors
- @ShrootBuck made their first contribution in https://github.com/solidtime-io/solidtime/pull/1045
- @utlark made their first contribution in https://github.com/solidtime-io/solidtime/pull/1054
Full Changelog: https://github.com/solidtime-io/solidtime/compare/v0.12.0...v0.12.1
Security Fixes
- Cross-organization modification of time-entry UUID (GHSA-pmf9-pxq9-ccwr)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]