Lauri Ojansivu 1d16955b6d Security Fix 9: Attachment upload not scoped to card/board relationship. ... Thanks to Joshua Rogers of joshua.hu, Twitter MegaManSec !		2025-12-29 17:06:22 +02:00
..
attachmentApi.js	Security Fix 9: Attachment upload not scoped to card/board relationship.	2025-12-29 17:06:22 +02:00
avatarServer.js	Some migrations and mobile fixes.	2025-10-25 21:09:07 +03:00
legacyAttachments.js	Security Fix JVN#74210258: Stored XSS.	2025-10-10 23:06:06 +03:00
universalFileServer.js	Fix SECURITY ISSUE 2: Access to boards of any Orgs/Teams, and avatar permissions.	2025-11-02 09:11:50 +02:00