Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/spec/requests
History
Exact
discourse-patch-triage[bot] 37969503f2 SECURITY: Gate private event invitee details [backport 2026.1] 
Backport of #709 to release/2026.1.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:27:06 +02:00
..
admin DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
api FIX: maintain wall clock time between DST transitions (#35833) 2025-11-07 13:25:56 +01:00
events_controller_spec.rb SECURITY: Gate private event invitee details [backport 2026.1] 2026-06-30 16:27:06 +02:00
group_timezones_spec.rb SECURITY: Group timezone serialization leaks hidden group members [backport 2026.1] (#40876) 2026-06-15 12:51:43 +01:00
invitees_controller_spec.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
site_spec.rb
sort_event_topics_spec.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00