Skip to content

fix: Session update endpoint allows overwriting server-generated session fields (GHSA-jc39-686j-wp6q)#10263

Merged
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-jc39-686j-wp6q-v9
Mar 21, 2026
Merged

fix: Session update endpoint allows overwriting server-generated session fields (GHSA-jc39-686j-wp6q)#10263
mtrezza merged 1 commit into
parse-community:alphafrom
mtrezza:fix/GHSA-jc39-686j-wp6q-v9

fix: Block expiresAt and createdWith on session update path

6277e9d
Select commit
Loading
Failed to load commit list.
Sign in for the full log view

Annotations

1 warning
Benchmarks
succeeded Mar 20, 2026 in 16m 24s