Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/spec
History
Exact
discourse-patch-triage[bot] 37969503f2 SECURITY: Gate private event invitee details [backport 2026.1] 
Backport of #709 to release/2026.1.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:27:06 +02:00
..
fabricators PERF: removes N+1 when loading events list (#34841) 2025-09-19 09:12:23 +02:00
integration FIX: correctly filter out event attendees (#36459) 2025-12-04 20:02:32 +01:00
jobs FIX: skip topic bump when date is in the past (#36784) 2025-12-18 21:29:06 +01:00
lib FIX: event not found after being edited to earlier date (#36481) 2025-12-08 17:41:46 +01:00
models SECURITY: Group timezone serialization leaks hidden group members [backport 2026.1] (#40876) 2026-06-15 12:51:43 +01:00
requests SECURITY: Gate private event invitee details [backport 2026.1] 2026-06-30 16:27:06 +02:00
serializers SECURITY: Group timezone serialization leaks hidden group members [backport 2026.1] (#40876) 2026-06-15 12:51:43 +01:00
services FIX: correctly filter out event attendees (#36459) 2025-12-04 20:02:32 +01:00
system DEV: Fix flaky category calendar color mapping tests (#37256) 2026-01-22 10:38:47 +08:00