| Name | Modified | Size | Downloads / Week |
|---|---|---|---|
| Parent folder | |||
| README.md | 2026-10-22 | 637 Bytes | |
| v1.14.21 source code.tar.gz | 2026-10-22 | 16.9 MB | |
| v1.14.21 source code.zip | 2026-10-22 | 21.8 MB | |
| Totals: 3 Items | 38.7 MB | 0 | |
TL;DR
π This is a security release!
Fixes the following vulnerabilities:
- A disabled API stays reachable through a percent-encoded path
- Host header injection in the shop password reset e-mail link when the channel has no hostname
- Unpublished product reviews disclosed through the Shop API item endpoint
Full Changelog: https://github.com/Sylius/Sylius/compare/v1.14.20...v1.14.21