Skip to content

Tags: conceptiveconsulting/Kavita

Tags

v0.6.1

Toggle v0.6.1's commit message
Bump versions by dotnet-bump-version.

v0.6.0

Toggle v0.6.0's commit message
Bump versions by dotnet-bump-version.

v0.5.6

Toggle v0.5.6's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
v0.5.6 Release (Kareadita#1499)

v0.5.5

Toggle v0.5.5's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Version bump (Kareadita#1442)

v0.5.4.2

Toggle v0.5.4.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
Fixed access issues around new Authorize scheme. (Kareadita#1416)

v0.5.4.1

Toggle v0.5.4.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
v0.5.4.1 - Security Hotfix (Kareadita#1414)

* Updated our security file with our Huntr.

* Fixed a security vulnerability where through the API, an unauthorized user could delete/modify reading lists that did not belong to them.

Fixed a bug where when creating a reading list with the name of another users, the API would throw an exception (but reading list would still get created)

* Fixed a security vulnerability where through the API, an unauthorized user could delete/modify reading lists that did not belong to them.

Fixed a bug where when creating a reading list with the name of another users, the API would throw an exception (but reading list would still get created)

* Ensure all reading list apis are authorized

* Ensured all APIs require authentication, except those that explicitly don't. All APIs are default requiring Authentication.

Fixed a security vulnerability which would allow a user to take over an admin account.

* Fixed a bug where cover-upload would accept filenames that were not expected.

* Explicitly check that a user has access to the pdf file before we serve it back.

* Enabled lock out when invalid user auth occurs. After 5 invalid auths, the user account will be locked out for 10 mins.

* Version bump for hotfix release

v0.5.4

Toggle v0.5.4's commit message
Bump versions by dotnet-bump-version.

v0.5.3

Toggle v0.5.3's commit message
Bump versions by dotnet-bump-version.

v0.5.2.5

Toggle v0.5.2.5's commit message
Fixed some missing merge stuff

v0.5.2.3

Toggle v0.5.2.3's commit message
Bump versions by dotnet-bump-version.