Kirby 3 & 4 Security Releases

Hey everyone,

we received reports of three potential vulnerabilities in the Panel and decided to release fixes today in 4.1.1 https://github.com/getkirby/kirby/releases/tag/4.1.1

All three vulnerabilities are a risk if you cannot trust your group of Panel users.

We’ve also updated our docs on the Markdown safe mode after discovering a few problems there: https://getkirby.com/docs/guide/templates/escaping#escaping-data-in-templates-and-snippets__escaping-kirbytext

We are also providing patches for Kirby 3:

1 Like

I might have noticed a little (not so important) bug in the latest 3.10.0.1 update – in panel/system it will show Free update 3.10.0 available, like it did on Kirby versions below 3.10.0.
AFAIK below v.4 is now in support updates only phase, this isn’t critical at all.

Just noticed that neither 3.10.0 or 3.10.0.1 appear listed on the Kirby releases page.

Thanks, @splorp, added.

1 Like

Thanks, Sonja!