Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 18:01:48 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/spec
History
Exact
discourse-patch-triage[bot] 7deb4b6963 SECURITY: Gate private event invitee details [backport 2026.5] 
Backport of #709 to release/2026.5.

---

## Summary

Fixes a private-event information disclosure in private event Invitee serialization.

## Security advisory

https://github.com/discourse/discourse/security/advisories/GHSA-22v7-6wgj-g9f7

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1057
- Original commit:

---

🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging.
2026-06-30 16:17:06 +02:00
..
fabricators FEAT: add webhooks for calendar events (#38315) 2026-03-09 12:30:19 -05:00
integration FEATURE: Better RSVPs on recurring events (#39892) 2026-05-18 10:42:09 +02:00
jobs DEV: Enable Style/RedundantBegin rubocop rule (#40096) 2026-05-19 18:44:54 +02:00
lib FEATURE: simplifed event creation in the composer (#39835) 2026-05-26 15:04:05 -04:00
models SECURITY: Group timezone serialization leaks hidden group members [backport 2026.5] (#40874) 2026-06-15 12:51:35 +01:00
requests SECURITY: Gate private event invitee details [backport 2026.5] 2026-06-30 16:17:06 +02:00
serializers SECURITY: Group timezone serialization leaks hidden group members [backport 2026.5] (#40874) 2026-06-15 12:51:35 +01:00
services FEATURE: Add "Events" category type for Calendar plugin (#39727) 2026-05-15 18:24:16 -03:00
system DEV: backport, fix restore post event allowed custom fields (#40584) 2026-06-04 14:53:57 -04:00