v5.1.0
v5.1.0 contains an important security update (CSRF prevention - CVE-2025-58430) along with other minor bug fixes and improvements.
What's new?
- ALTCHA (self-contained proof-of-work CAPTCHA alternative) in addition to hCaptcha (deprecated)
- Refactored media gallery with a new UI and improved UX.
- Bulk subscriber blocklisting directly from the bounces UI.
- Auto-creation of OIDC users with default user and list roles.
Breakings change to subscription-form.html
If you are loading a custom subscription-form.html static template with --static-dir, you have to update your template with the breaking changes (CAPTCHA logic) from the new
