Uname:
Linux server18.dn-server.com 3.10.0-962.3.2.lve1.5.88.el7.x86_64 #1 SMP Fri Sep 26 14:06:42 UTC 2025 x86_64
Software:
LiteSpeed
PHP version:
7.4.33 [ PHP INFO ] PHP os:
Linux
Server Ip:
185.126.202.122
Your Ip:
216.73.217.55
User:
rahbordf (4876) | Group:
rahbordf (4881)
Safe Mode:
OFF
Disable Function:
show_source, system, shell_exec, passthru, exec, popen, proc_open
####################################
# v9.1.5 - (2026-08-12)
####################################
- Back Office:
- Improvement:
- #41942: Add shared stock help message to combination availability form (by @Codencode)
- #41776: Change badge color for product quantity display (by @Maofree)
- GHSA-xrwj-pq6w-f8m4 Validate image URLs on CSV import to prevent Server-Side Request Forgery (by @clotairer & @matthieu-rolland, vulnerability reported by lrui1)
- GHSA-w6j9-q9rq-wrqg Escape leading formula characters in CSV exports (by @clotairer & @matthieu-rolland, vulnerability reported by Suphawith Phusanbai)
- GHSA-2cr4-vw9p-pjvf Parse the X-Forwarded-For header from right to left to prevent IP spoofing (by @clotairer & @matthieu-rolland, vulnerability reported by Pedro Gabaldón Juliá from ITRESIT)
- GHSA-whxq-pxj5-qq7v Escape identifiers in legacy admin list filters to prevent SQL injection (by @clotairer & @matthieu-rolland, found by Savio from Doyensec in collaboration with Anthropic Research)
- GHSA-jf3w-9rmr-5rcr Restrict the notifications endpoints to authorised employees (by @clotairer & @matthieu-rolland, vulnerability reported by Robert Scherer)
- Bug fix:
- #42203: Let a grid status menu show past the scrolling table (by @boo-code)
- #42057: Fix changing an employee role when the default page is specific to the new role (by @boo-code)
- #42004: Fix UTF-8 string truncation in StringModifier::cutEnd() (by @Codencode)
- #42001: Guard order message name-uniqueness check on partial edit (backport 9.1.x) (by @mattgoud)
- #41950: Show an empty order status dropdown when the order has no status (by @boo-code)
- #41944: Connect `GET /discount-types` to the BO (by @nicosomb)
- #41929: Fix catalog price rule links when feature flag is enabled (by @Codencode)
- #41923: Changing stock behaviour not working with multistore. (by @Prestaworks)
- #41919: Fix: Problem with manual special price setting with comma becoming dot (product page) (by @Codencode)
- #41871: Use the small_default thumbnail for product/combination cover URLs (by @boo-code)
- #41797: Fix: Color preview is still displayed after changing an attribute group from color to another type (by @Codencode)
- #41736: Fix custom feature value selection when no predefined values exist (by @Codencode)
- #41735: Fix feature values grid to exclude custom values (by @Codencode)
- #41727: Fix: Module Development and Distribution: Prestashop deletes automatically src/Entity/index.php, but it does not recursively in subfolders (by @Codencode)
- #41675: Fix: HTMLPurifier through twig extension is not adhering to cache dir config (by @Codencode)
- #41665: Display invoice prefix in employee language on order view page (by @PrestaEdit)
- #41652: Fix: Changing an order's status throws "Duplicate entry '<idp>-<idpa>-0-0' for product_sqlstock" when the order contains a deleted combination (single-shop) (by @Codencode)
- #41611: Cart rule compatibility search does not filter results for new cart rule (by @LaBisquerie)
- #41573: Fix highlight option missing in Discount V2 form (by @mattgoud)
- #41570: Use position as default sorting for feature grid (by @Codencode)
- #41552: Fix #41189 - Allow changing discount status on edit page (by @mattgoud)
- #41551: Fix shop selector lists overflowing their container (by @david-prochazka)
- #41530: Shopping Carts : For combinations, if no image defined, use the cover image (by @Progi1984)
- #41524: Invoice : If no payments, display the payment method (by @Progi1984)
- #41468: Fix: Multishop: cache_default_attribute is not reset for all shops when changing a product with combinations to a standard product (by @Codencode)
- #41457: Enhance invoice filename safety by sanitizing number (by @Maofree)
- #41394: Fix: [Multishop] Error when updating "Schema of URLs" for a single shop (by @Codencode)
- #41307: Fix PDF downloads using Symfony responses (by @Codencode)
- #41303: Fix address state selection after country states reload (by @Codencode)
- #41238: Fix: Inconsistent escaping of displayCustomization output (by @Codencode)
- #41206: Bugfix: prevent email shortcodes automatically being moved. Fixes #38563 issue (by @aleksiuno)
- #41204: Change the redirection of combination button learn more (by @AureRita)
- #41036: Fix: Error 500 if I enter a space in a customer's first or last name field (by @Codencode)
- #41007: Fix: CountryQueryBuilder::getCountQueryBuilder() always returns 1 instead of the true total (by @Codencode)
- #40999: Fix/40997 default currency import on shop copy (by @Codencode)
- #40898: Fix: Bug: reserved_quantity not updated when "Share available quantities for sale" is enabled (Multishop) (by @Codencode)
- #40099: Fix: Cart rule combinations lost when saving if lazy-loaded list (jscroll) is not fully loaded (by @Codencode)
- Front Office:
- New feature:
- #41824: Add hook actionNotFound (by @Hlavtox)
- Improvement:
- #41281: Harden and depreciate /init.php for 9.1.x (by @jf-viguier)
- #40977: Add prices in all variants to make displaying them easier in templates (by @Hlavtox)
- Bug fix:
- #42000: Fix ProductController::getProduct() nullable return type (by @Codencode)
- #41899: Scope Image::getCover() to the shop (by @boo-code)
- #41649: Add missing breadcrumb link to OrderDetailController (by @Codencode)
- #41590: Add missing breadcrumb link to CartController (by @Codencode)
- #41509: Avoid bad URL on invalid media with media servers enabled and CCC disabled (by @gross-nvs)
- #41299: Guard product page when product is null (by @Codencode)
- #41298: Fix: hook extra content issues with multi shipment (by @Nakahiru)
- Refactoring:
- #41845: Add simple HTML to text stripper, refactor getting meta (by @Hlavtox)
- Core:
- New feature:
- #40654: Theme helper to check framework's compatibility (by @kpodemski)
- Improvement:
- #42239: Update Symfony components after 6.4.43 release (by @nicosomb)
- #41883: Update Symfony components after 6.4.42 release (by @nicosomb)
- #41647: Bump version 9.1.5 (by @jolelievre)
- #41567: Update Symfony components after 6.4.41 release (by @nicosomb)
- #41529: Set version to 9.1.4 (by @Progi1984)
- #41465: Update Symfony components after 6.4.39 release (by @nicosomb)
- #310: Implement URL safety validation for image imports (build-915) (by @matthieu-rolland)
- Bug fix:
- #41842: Fix: Update cache directory handling in HTMLPurifier constructor (by @Progi1984)
- #41840: Keep word separation when stripping HTML for the search index (by @boo-code)
- #41808: Fix meta title appended to CMS page, CMS category, manufacturer, and supplier URLs (by @Codencode)
- #41761: Fix Hummingbird development files included in release package (by @Codencode)
- #41760: Fix image-types list endpoint returning 405 by making grid data facto… (by @axel-paillaud)
- #41750: Prevent empty ean13 into product URL (by @hadjedjvincent)
- #41708: Fix states lookup using row indexes instead of country IDs (by @paulschwahn)
- #41626: Fix multilang fallback for fields using isRequiredWhenActive and defaultLanguageRequiredWhenActive validators (by @guillaume60240)
- #41431: Backport #41356 : Add CartId into product search handler when employeeId not provided (by @Progi1984)
- #41386: Fix route management and comment Dispatcher (by @Hlavtox)
- #41273: Fix: cast bool field in get cms page category for editing handler (by @axel-paillaud)
- #41225: Fix attribute and attribute group position ordering in core methods (by @nicohery)
- #41130: Fix: guard against null employee in associateWithShops() (by @axel-paillaud)
- #40744: Fix translation catalogue filename corruption during export (by @aeyoll)
- #39837: Change matching method in ShopContextSubscriber (by @djbuch)
- #317: Update modules and dependencies (by @jolelievre)
- Refactoring:
- #41713: Fix unit price ratio currency conversion and specific price issue (by @Hlavtox)
- #41579: Fix some deprecations (by @Hlavtox)
- Tests:
- Improvement:
- #42134: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #42090: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #42033: Add integration tests for ModuleHtmlAuthorizationChecker (by @Codencode)
- #41987: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41810: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41805: Functional Tests : Fixed after #41570 (by @Progi1984)
- #41788: Functional Tests : Improved for Klavyio (by @Progi1984)
- #41780: Functional Tests : Improved for Klavyio (by @Progi1984)
- #41747: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41737: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41659: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41518: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41503: Functional Tests : Bump @prestashop-core/ui-testing (by @Progi1984)
- #41476: Functional Tests : Remove numbering in endpoints directoriess (by @Progi1984)
- #41475: Functional Tests : @prestashop-core/ui-testing (by @Progi1984)
- #41462: Functional Tests : @prestashop-core/ui-testing (by @Progi1984)
- Bug fix:
- #42031: Fix CI matrix generator crashing on backticks in PR description (by @boo-code)
- #41982: Pin maildev image to 2.2.1 in behaviour tests workflow (by @nicosomb)
- #41755: Fix flaky quick access filter UI test (multi-tab) (by @mattgoud)
####################################
# v9.1.4 - (2026-06-03)
####################################
- Core:
- Bug fix:
- #230: Update dependencies, symfony and twig, and faceted search (by @jolelievre)
####################################
# v9.1.3 - (2026-05-21)
####################################
- Core:
- Improvement:
- #41515: Upgrade Symfony package to 6.4.40 and twig/twig to 3.26.0 (by @cnavarro-prestashop)