Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/app
History
Exact
discourse-patch-triage[bot] 7deb4b6963 SECURITY: Gate private event invitee details [backport 2026.5] 
Backport of #709 to release/2026.5.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:17:06 +02:00
..
controllers DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
models DEV: Enable Style/RedundantSelf rubocop rule (#40098) 2026-05-19 19:27:45 +02:00
serializers SECURITY: Gate private event invitee details [backport 2026.5] 2026-06-30 16:17:06 +02:00
services FEATURE: Better RSVPs on recurring events (#39892) 2026-05-18 10:42:09 +02:00
views/discourse_post_event/events FEATURE: Add friendly names to calendar subscription feeds (#39154) 2026-04-08 13:34:04 -03:00