SCaptcha 2.4.0
This update fixes several security issues and improves the reliability of form verification. We recommend updating all SCaptcha 2 installations.
SCaptcha 2.4.0
Released 6 November 2026
Security and form verification
- Sentinel remains active when a previously solved CAPTCHA is hidden after a form validation error. Changed email addresses are checked when the form is submitted again. Completed CAPTCHA verification is retained for ordinary input errors.
- Additional image and audio code challenges have been strengthened against bypass and manipulation attempts.
- Fixed issues in Under-Attack mode and improved protection against bypass attempts.
- Stored blocking decisions remain effective for their intended validity period.
- Corrected the handling of expired challenges and several error conditions.
- Added protection for form requests and the display of request data in the widget and analytics area. CSV exports have also been made safer.
- Security tokens are removed from URLs in newly recorded log entries.
- Updated internal libraries and components.
Existing settings are preserved during the update.