id	resolution	summary	owner	reporter
1027	fixed	Authorization checks on all controller actions	pudo	pudo
1028	fixed	Open redirect in locale setting	dread	dread
1029	fixed	synchronous search erroring when harvesting is run.		kindly