fix(core,installer,ci) security issues - #2442

Merged

Seiger merged 5 commits into

evolution-cms:3.5.xfrom

elcreator:fix-security-issues

Sep 21, 2026

Commits on Aug 30, 2026

fix(core): open redirect, insufficient randomness, missing audit if composer.lock unchanged.
elcreator
committed
5cacfa4
fix(installer): insufficient IP check on installer dir removal, missing tests.
elcreator
committed
5adbb56

Commits on Sep 21, 2026

Merge branch '3.5.x' into fix-security-issues
elcreator
committed
e10a13e
Merge branch '3.5.x' into fix-security-issues
elcreator
committed
27243b7
fix(deps): lock composer/composer 2.10.3, which vendor already ships (CVE-2026-84361)

elcreator
and
claude
committed
cb1d586