MODX Revolution 3.2.4 is out now. This is a security patch addressing three issues affecting versions 3.0.0 through 3.2.3—setup configuration handling, access control on an administrative endpoint, and token generation for an authentication flow. While each depends on specific site conditions, we consider this upgrade mandatory.
An Upgrade Note
Current versions of MODX Revolution 3.x ship with GuzzleHttp in the core as a dependency. Some Extras have historically packaged or included GuzzleHttp, however, sites using such Extras will experience errors after upgrade due to the two incompatible versions of GuzzleHttp.
To Resolve
The easiest way to resolve this is to access your server via SSH and remove the vendor/guzzlehttp directories found on the file system that live in any of the installed Extras. This may also be done by manually looking under the core directory for guzzlehttp. To search the server from the command line, please use the following to find the files:
find . -type d -name guzzlehttp
This should identify any location of that directory. You can ignore the core/package directories. Delete any that aren’t in the core/vendor directory.