From 606d64ceb6b5d38f40e301f710ebe8a1ba1acc85 Mon Sep 17 00:00:00 2001 From: Lain Soykaf Date: Sun, 20 Jul 2025 21:37:41 +0400 Subject: [PATCH] Add changelog entry for admin self-revocation fix --- changelog.d/admin-self-revocation.security | 1 + 1 file changed, 1 insertion(+) create mode 100644 changelog.d/admin-self-revocation.security diff --git a/changelog.d/admin-self-revocation.security b/changelog.d/admin-self-revocation.security new file mode 100644 index 000000000..a311ca1ed --- /dev/null +++ b/changelog.d/admin-self-revocation.security @@ -0,0 +1 @@ +Admin API: Fixed self-revocation vulnerability where admins could accidentally revoke their own admin status via the single-user permission endpoint \ No newline at end of file