[IMPORTANT ALERT] Snowplow Mini vulnerability and fix

[stevecs]

Linking to a security notice from here for visibility.

Important notice: Snowplow Mini vulnerability and fix

Project: Snowplow Mini Vulnerability: Access to unsecured endpoint showing collected data Description: The Snowplow Mini project provides a simplified version of a full pipeline for testing and evaluation purposes. An issue introduced in version 0.5.0 of the project means that some endpoints provided by an upgraded dependency are not secured via our basic authentication rules, and visitors are not challenged for a username and password. Impact: If you’re using Mini for testing purposes as …