SECURITY

• critical Fix potential XSS with remote storyboard in SVG format GHSA-jwcf-xj6w-xqm5
• high Do not allow moderators to act on 2FA/token sessions of other moderators/admins GHSA-xpw4-mxj2-rj8x
• moderate Prevent private video metadata leak GHSA-4hwq-4jr6-w3gg
• moderate Prevent ActivityPub DDOS GHSA-r8wm-f869-fpw3
• moderate Fix SSRF for webfinger, HTTP video import and JSON-LD context resolver GHSA-xgcr-r7cv-7xhv
• Security hardening

Bug fixes

• Force video encoding if there are rotation info
• Fix broken studio on only intro/outro/cut task
• Fix broken sorts/invalid sort checkers for channel syncs and ownership changes
• Fix downloading a download-protected video for admins
• Fix broken email title in some emails
• Fix broken notification window if the list contains a broken change ownership notification
• Fix table pagination after a search
• Include muted muted videos when admins/moderators display all videos of an account/channel