This resolves issues described in SA-CORE-2019-003 for this module. Not all configurations are affected. See SA-CORE-2019-003 for details.
{ "constraint": "<1.7.0" }
"<1.7.0"
"https://github.com/DrupalSecurityTeam/drupal-advisory-database/blob/main/advisories/tmgmt/DRUPAL-CONTRIB-2019-024.json"