Get it here: https://open.vanillaforums.com/addon/vanilla-core
This release includes 5 security patches disclosed thru our HackerOne bounty campaign. They include fixes for:
* A remote code e… (View Post)
For those still running PHP 5.6, we've now released Vanilla 2.5.3 - now 2.5.4 with a patch for the disclosed vulnerability and a few other security patches.
If you are able to run PHP 7.0+ we str… (View Post)
All installations must be upgraded to Vanilla 2.6.1 immediately. Please follow the upgrade instructions in the README.
Full release notes will follow shortly. This release contains multiple securi… (View Post)