There has been a security release for CiviCRM. We recommend you immediately upgrade to one of the following versions:

• CiviCRM v5.36.1
• CiviCRM v5.35.2
• CiviCRM v5.33.5 ESR

Below are the security advisories:

• CIVI-SA-2021-08: Access Bypass in APIv4

A couple of other issues have been fixed in these releases. Please see the official announcement and release notes.

We would also like to thank Deutsche Gesellschaft für Internationale Zusammenarbeit GmbH for funding this security release.

Upgrade now for the most stable CiviCRM experience:

• To download CiviCRM v5.36.1: https://civicrm.org/download
• To download CiviCRM v5.35.2: https://sourceforge.net/projects/civicrm/files/civicrm-stable/5.35.2/
• To download CiviCRM v5.33.5 ESR version: https://civicrm.org/esr (https://lab.civicrm.org/esr/core/-/releases)