Skip to content

[6.x] Harden user augmentation - #15733

Merged
duncanmcclean merged 3 commits into
statamic:6.xfrom
tsurutanmen:fix-two-factor-recovery-codes-exposure
Oct 28, 2026
Merged

duncanmcclean merged 3 commits into
statamic:6.xfrom
tsurutanmen:fix-two-factor-recovery-codes-exposure

Conversation

@tsurutanmen

@tsurutanmen tsurutanmen commented Oct 27, 2026 •

Copy link
Copy Markdown
Contributor

This PR hardens user augmentation, preventing unwanted keys from being augmented.

@duncanmcclean duncanmcclean changed the title Fix 2FA recovery codes leaking through augmented user values (CVE-2026-71293) Harden user augmentation Oct 28, 2026
@duncanmcclean duncanmcclean changed the title Harden user augmentation [6.x] Harden user augmentation Oct 28, 2026
@duncanmcclean
duncanmcclean merged commit 36ceae9 into statamic:6.x Oct 28, 2026
61 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants