What changed
No action needed unless you validate responses against a closed schema.
Affects confirmation_token reachable from 2 operations.
Who is affected
Code that reads Stripe's confirmation_token objects, used by 2 Stripe operations.
Before and after
| Where | Before | After |
|---|---|---|
| confirmation_token.metadata | absent | present |
Based on Stripe’s published API specification. How severity is decided.