commit: 606d64ceb6b5d38f40e301f710ebe8a1ba1acc85
parent c38ce20a5d666e861b29fcce07ea80865ec7315d
Author: Lain Soykaf <lain@lain.com>
Date: Sun, 20 Jul 2025 21:37:41 +0400
Add changelog entry for admin self-revocation fix
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/changelog.d/admin-self-revocation.security b/changelog.d/admin-self-revocation.security
@@ -0,0 +1 @@
+Admin API: Fixed self-revocation vulnerability where admins could accidentally revoke their own admin status via the single-user permission endpoint
+\ No newline at end of file