Catalog / PocketBase

0.22.42

v0.22.42 Release

4 months agosecurityfixedchangedOriginal notes
  • (Backported from v0.37.4) Adjusted Bitbucket, GitHub, GitLab and Gitea/Forgejo OAuth2 providers to better reflect recent API updates and doc references. In case the userinfo data is not sufficient, some of the providers now send a separate list emails request in order to minimize eventual linking security issues caused by custom onpremise setups (e.g. Gitea/Forgejo allows skipping the email verification if an ENV variable is configured).

  • (Backported from v0.37.4) ⚠️ Fixed a pre-hijacking OAuth2 linking vulnerability (#7662).