Fabien O'Carroll 4e947a88ce Fixed security hole in email address change flow ... refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr The email address change flow was built on top of the unauthenticated signin/signup flow. This meant that ownership of the email being changed wasn't verified and allowed a malicious actore to change the email address of arbitrary accounts to an email address which they controlled. We remove the ability to change email addresses from the signin/signup flow and instead create a dedicated, authenticated flow for changing email address.		2021-09-22 16:49:17 +02:00
..
domain-events	Published new versions	2021-09-21 18:42:13 +02:00
magic-link	Published new versions	2021-09-21 18:42:13 +02:00
member-analytics-service	Published new versions	2021-09-22 17:21:49 +05:30
member-events	Published new versions	2021-09-21 18:42:13 +02:00
members-analytics-ingress	Published new versions	2021-09-22 17:21:49 +05:30
members-api	Fixed security hole in email address change flow	2021-09-22 16:49:17 +02:00
members-csv	Published new versions	2021-09-01 19:12:44 +02:00
members-importer	Published new versions	2021-09-01 19:12:44 +02:00
members-ssr	Published new versions	2021-09-21 18:42:13 +02:00
members-stripe-service	Published new versions	2021-09-22 18:09:11 +05:30