Security Advisory July 29 2025, Open Sourcing an Umbraco Cloud Site, Something Big Coming to Manchester in November and much more...

Sign Up | View Online | Previous Editions

UMB.FYI 2025-07-30

Umbraco HQ

Security Advisory, July 29, 2025: Security Patches are now available

Umbraco versions 13.0.0 to 16.1.0 are affected by a vulnerability in the Content Delivery API, allowing unauthorized access to cached content without a valid API key. Patches are available for the latest minor versions, and Umbraco Cloud sites will be automatically updated. Users are advised to upgrade to supported versions for security.

[ ] [ #security ]

Community

Open Sourcing an Umbraco Cloud Site

At Umbraco DevRel Towers, the team is developing a new community website to enhance user contributions while ensuring sensitive data remains secure. They propose a workflow utilizing Umbraco Cloud and GitHub Actions for deployment, inviting community feedback on the contribution process and offering guidance for setting up local repositories without sensitive information.

[ ] [ #opensource ] [ #umbracocloud ]

Adding 2FA (+ recovery codes) for Umbraco Members

In a recent project, Rick Butterfield implemented two-factor authentication (2FA) for a member login area in Umbraco 13, discovering gaps in documentation regarding recovery codes. They detailed the process of adding 2FA, including custom code for member registration and recovery code generation, ultimately achieving a functional 2FA system with recovery options.

[ ] [ #authentication ]

Watch & Listen

Aftermovie Umbraco Business Summit 2025

The Umbraco Business Summit 2025 aftermovie highlights dynamic, non‑PowerPoint sessions including live case‑studies, interviews, and networking. Topics covered include Umbraco’s roadmap, GEO findability, agency insights, and actionable ideas for businesses.

[ ] [ #business ]

umbraCoffee - Summer Shenanigans

A lively, loose‑format chat around summer routines, conference travel and work–life balance, neurodiversity, burnout, and new Umbraco‑related developments like Umbraco 16 and Compose, with hosts sharing personal holiday habits, conference fatigue, and evolving company focus.

[ ] [ #umbracoffee ]

DevRel Deep Dive: Open Sourcing an Umbraco Cloud Site

Sebastiaan and Lotte from the Umbraco DevRel team test a proof of concept for open-sourcing an Umbraco Cloud site. They walk through secure GitHub-based contributions, schema syncing, and deployment, inviting the community to help improve the process ahead of the new community site's launch.

[ #devreldeepdives ]

Events

UmbraCymru - Social Meetup, July 2025

2025-07-30 from 18:00 to 21:00 - The Head of Steam Cardiff, 18-19 Church Street, Cardiff, GB

[ ] [ #social ]

UmbLeeds: Summer BBQ and social

2025-07-31 from 18:00 to 20:00 - Sheares yard, 11-15 wharf street Leeds ls2 7eh, Leeds, GB

[ #social ]

Umbraco Virtual Lunchtime Chat

2025-08-06 from 13:00 to 14:00 - Online on ONLINE

[ #social ] [ #virtual ]

Umbraco Melbourne - August 2025 Meetup

2025-08-06 from 18:00 to 19:30 - Luminary, Level 1, 195 Little Collins Street, Melbourne, AU and Online

[ #ai ]

Packages

ReadingRoom.Umbraco.CloudflareStream

Integrate Cloudflare Stream in Umbraco CMS

Moriyama.RequestProtect.Umbraco.Admin

A flexible middleware component that provides IP whitelisting, URL pattern matching, and query string authentication for protecting areas of your Umbraco website. Perfect for securing preview environments, staging sites, or restricting access to specific content.

Umbraco.Community.PropertyEditors.Heading

A lightweight and flexible property editor for headings in Umbraco CMS. Define heading level and alignment through the backoffice, and render easily using the built-in TagHelper.

Social

Version 16 of Umbraco Engage is available now

[ ] [ #umbracoengage ]

OpenCV based people library package in progress

[ #packagedev ]

Bee prepared for something big in Manchester this 7th November 2025

[ #events ] [ #umbracointhecity ]

Features for the Umbraco Community YouTube channel wanted

[ ]

---
UMB.FYI, Unit 128100, PO Box 4336, Manchester, M61 0BW