Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 19:36:44 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/app
History
Exact
discourse-patch-triage[bot] 37969503f2 SECURITY: Gate private event invitee details [backport 2026.1] 
Backport of #709 to release/2026.1.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:27:06 +02:00
..
controllers FIX: maintain wall clock time between DST transitions (#35833) 2025-11-07 13:25:56 +01:00
models FIX: event not found after being edited to earlier date (#36481) 2025-12-08 17:41:46 +01:00
serializers SECURITY: Gate private event invitee details [backport 2026.1] 2026-06-30 16:27:06 +02:00
services FIX: correctly filter out event attendees (#36459) 2025-12-04 20:02:32 +01:00
views/discourse_post_event/events FIX: event location field in .ics / google calendar exports (#35355) 2025-10-16 15:53:01 +02:00