On behalf of Zope developer community I am pleased to announce the release of Zope 6.2.
This release turns off the rarely-used XML-RPC publishing functionality by default in order to remove the risk of abuse by malicious actors. If you really need XML-RPC, simply add "enable-xmlrpc on" to your Zope configuration to turn it back on.
If you are still on Zope 5 we recommend adding "enable-xmlrpc off" to your Zope configuration to disable XML-RPC unless you really need it.
Links to more information:
- full change log: Change log - Zope 6.3.dev0 documentation
- installation instructions: Installing Zope - Zope 6.3.dev0 documentation
- documentation: https://zope.readthedocs.io/
- source code: GitHub - zopefoundation/Zope: Zope is an open-source web application server. · GitHub
- migration from Zope 5 to Zope 6: Migration from Zope 5 to Zope 6 - Zope 6.3.dev0 documentation