supertokens-core v11.2.4
supertokens-core v11.2.4
- Prevents an app-scoped API key from updating its parent connectionUriDomain (GHSA-4rf2).
- Enforces dashboard session expiry at verification time (GHSA-w9fp-wv6g-pqv8).
- Scopes WebAuthn sign-in to the requested tenant (GHSA-6v34-w48w-44rc).
- Serializes session creation with account unlink to close a session race (GHSA-2pc4-vw9j-454c).
Full Changelog: https://github.com/supertokens/supertokens-core/compare/v11.2.3…v11.2.4
Source supertokens/supertokens-core ·
v11.2.4· 2026-10-16 · upstream release
Mirrored verbatim for indexing. All rights belong to the upstream project.
Release notes are published by the upstream project and mirrored here for indexing. All rights belong to their authors.