v3.4.5 - Security fixes

brdweb released this 02 Jan 15:34

· 87 commits to main since this release

d282f27

Security Fixes

Stack trace exposure: Fixed information leakage in Stripe service error responses and webhook handler. Generic error messages are now returned to users instead of internal exception details.
Password hashing: Added suppression for legacy SHA-256 password migration code (intentional migration path that auto-upgrades passwords to secure hashing on login).

Changes since v3.4.4

Sanitized error messages in billing endpoints
Improved webhook error handling

Assets 2