1.9.1

This release features one security fix. Because this is a security release, it is recommended that you update your sites immediately.

The Distributor team would like to thank the reporter for responsibly disclosing this issue, and allowing it to be fixed in this release. If you wish to report a potential security issue, please do so by submitting a security advisory.

Security

• Removed potential for data exposure via the REST API (props @dkotter, @jeffpaul, @peterwilsoncc via GHSA-q43c-v867-4cfp).