Information securityfromTryton Discussion18 hours agoSecurity Release for issue #14290sao executes JavaScript in uploaded HTML documents, exposing session and sensitive data; upgrade sao to the latest version to remediate.