- Edited
Successfully upgraded, thanks for the bug fix 
it would be great if we get notified in our own flarum dashboard about the updates like Wordpress does 
for now subscribed @ github core & receiving email notifications
Critical security update to Flarum core, with new incident write-up (v1.0.2)
[deleted]
I upgraded 
But still I am really afraid. 
Hari this is something we've discussed a little bit internally, but always got pushed off/back it order to get stable out. Now that stable is out we'll probably revisit this kind of thing.
- Edited
Update: As @peopleinside note, don't forget php flarum migrate after update 
- Edited
Anonymous43 you should ask help to the Gamification developer extension
Prcek this is maybe because you need run php flarum migrate after the SSH update command or simply insert the database password for end up the update I don't think this is related to the security issue that has been fixed.
@davwheat you may need add the security alert also on GitHub https://github.com/flarum/core/security/advisories
- Edited
peopleinside Yeah, you are absolutely right 
This is the first time I forgot to run php flarum migrate after upgrade. So I wondered what my eyes saw 
flarum.it, update ok
peopleinside @davwheat you may need add the security alert also on GitHub https://github.com/flarum/core/security/advisories
Yeah we are working on that.
- Edited
A security advisory for this vulnerability has been published on GitHub: https://github.com/flarum/core/security/advisories/GHSA-5qjq-69w6-fg57
First Stable first CVE with score 10 
I fixed my error, by uninstalling gamification, and installing it back on 1.0.2.
Isn't there any extension can be used for rss now?
[deleted]
Star Isn't there any extension can be used for rss now?
What was the security hole?
- Edited
Justman10000 you can read the security advisory on Github for the full information.
- Edited
Justman10000 have you cleared your cache (php flarum cache:clear)?
Uff! Forgot 