Hey everyone,
We’ve just released a series of security patches related to insufficient language permission checks.
Kirby 4.3.1 is our latest release and includes these fixes, but there are also dedicated patch releases for Kirby 3.10 through to 3.6:
- 4.3.1: Release 4.3.1 · getkirby/kirby · GitHub
- 3.10.1.1: Release 3.10.1.1 · getkirby/kirby · GitHub
- 3.9.8.2: Release 3.9.8.2 · getkirby/kirby · GitHub
- 3.8.4.4: Release 3.8.4.4 · getkirby/kirby · GitHub
- 3.7.5.5: Release 3.7.5.5 · getkirby/kirby · GitHub
- 3.6.6.6: Release 3.6.6.6 · getkirby/kirby · GitHub
Please check if your site might be affected and update your installation accordingly. Note that Kirby 3.6 and 3.7 have now reached end of life and will not receive future security updates.
Upcoming releases for Kirby 4.4 and v5 alpha will of course also include the fixes.