Daily updates from Odoo
Friday, July 18, 2025
1 change · saas-18.4
Security fixes and vulnerability patches
Direct debit payment notification emails now hide most of the bank account number, showing only the last four characters. This helps protect customer banking information if an email is forwarded, viewed, or stored outside secure systems.
Original PR description
Before this fix, The bank account was shown in clear inside the direct debit payment notification mail Now, we replace all chars by * except the 4 last ones. task-4592821 Forward-Port-Of: odoo/enterprise#85735