diff --git a/website/docs/releases/2024/v2024.4.md b/website/docs/releases/2024/v2024.4.md index 3139f9ba9d..1f161bd244 100644 --- a/website/docs/releases/2024/v2024.4.md +++ b/website/docs/releases/2024/v2024.4.md @@ -235,6 +235,14 @@ helm upgrade authentik authentik/authentik -f values.yaml --version ^2024.4 - web/flows: fix missing fallback for flow logo (cherry-pick #9487) (#9492) - web: Add missing integrity hashes to package-lock.json (#9527) +## Fixed in 2024.4.3 + +- core: fix source flow_manager not always appending save stage (cherry-pick #9659) (#9662) +- security: fix [CVE-2024-37905](../../security/CVE-2024-37905.md), reported by [@m2a2](https://github.com/m2a2) (cherry-pick #10230) (#10236) +- security: fix [CVE-2024-38371](../../security/CVE-2024-38371.md), reported by Stefan Zwanenburg (cherry-pick #10229) (#10233) +- sources/saml: fix FlowPlanner error due to pickle (cherry-pick #9708) (#9709) +- web: fix value handling inside controlled components (cherry-pick #9648) (#9685) + ## API Changes #### What's New