A new version for Elgg 3.3 and 4.0 is now available in the download section.

This release includes several security fixes. It's recommended to update as soon as possible.

Release notes 3.3.22:

Contributors

• Jerôme Bakker (3)

Bug Fixes

• groups: prevent misuse of group membership actions (d9fcad76) thanks to Breno Vitório for reporting this

Release notes 4.0.4:

Includes the security fix from 3.3.22.

The rest of the release notes were hard to find.