**** — 2 months ago

Fixed an authenticated (Subscriber+) path traversal vulnerability in the cache-clear handler that could delete arbitrary CSS/JS files.