[IMPORTANT ALERT] New Snowplow Mini (0.4.0 to 0.6.3 inclusive) vulnerability and fix

[stevecs]

Linking to a security notice from here for visibility.

Important notice: New Snowplow Mini (0.4.0 to 0.6.3 inclusive) vulnerability and fix

Project: Snowplow Mini Vulnerability: Access to unsecured endpoint showing collected data Description: The Snowplow Mini project provides a simplified version of a full pipeline for testing and evaluation purposes. Following the announcement of a vulnerability in Snowplow Minis, communicated on October 28th, we have conducted a thorough review of the Mini ecosystem. This review has surfaced other endpoints that are not secured via our basic authentication rules, so visitors are not challenge…