v2.3.2 v2.3.3
low risk
krahets/hello-algoAug 31, 2026 → Sep 1, 20261 day between releases
What's New
v2.3.3 fixes a permission issue preventing pre-seller members from reading vendor stores.
Bug Fixes
- Fixed access control for pre-seller members to read vendor stores.
Upgrade Notes
This is a patch release following a critical security fix. No configuration changes are required.
The Two Releases
v2.3.2
v2.3.2
Aug 31, 2026· 2 months ago
A critical security release fixing a Broken Access Control (BOLA) vulnerability in the vendor API that allowed account takeover.
Full release notesv2.3.3
v2.3.3
Sep 1, 2026· 2 months ago
Fixes a permission issue that prevented pre-seller members from reading vendor stores.
Full release notes