Fixed Authentication Session Token Vulnerability
Patched a vulnerability where session tokens could persist beyond their intended lifetime. Rate limiting on login attempts has been tightened and suspicious activity logging has been improved.
We’ve released a security patch addressing a vulnerability in the authentication flow.
Details:
- Fixed an issue where session tokens could persist longer than intended
- Improved rate limiting on login attempts
- Added additional logging for suspicious activity
Action Required:
No action is required. All users have been automatically updated.
We recommend enabling two-factor authentication for additional security. Go to Settings → Security → Two-Factor Authentication.