pleroma/changelog.d
Lain Soykaf c686b701dd
fix(oauth): require security scopes to list and revoke tokens
/api/oauth_tokens skipped the scope check, so a token with any scope
could list the user's sessions and revoke them.
2026-10-26 12:28:04 +04:00
..
legacy-sequences.fix Delete legacy Postgres sequences 2026-08-24 14:51:58 -07:00
oauth-tokens-scopes.security fix(oauth): require security scopes to list and revoke tokens 2026-10-26 12:28:04 +04:00
release-2.11.0.skip Prepare 2.11.0 release 2026-10-22 11:34:11 +04:00