# changelog

author: Remi Collet <remi@remirepo.net> - 7.4.33-14
changelog:
  - Fix __Host-/__Secure- cookie bypass due to partial CVE-2022-31629 fix
    CVE-2024-2756
  - Fix password_verify can erroneously return true opening ATO risk
    CVE-2024-3096


