Security Advisory
We were recently made aware of a security issue that enables logging in to the API without MFA - even if configured - GHSA-2crp-q9pc-457j
What's Changed
Security Patches
- Merge pull request from GHSA-2crp-q9pc-457j by @SchrodingersGat in #7320
Bug Fixes
- [0.15.x] Fix for email template (#7249) by @github-actions in #7251
- [0.15.x] Add Meta subclass for build serializers (#7315) by @github-actions in #7316
Devops / Setup Changes
- [0.15.x] fix: SELinux labels for Caddyfile (#7261) by @github-actions in #7262
- [0.15.x] Add clearer error message for invalid SITE_URL (#7311) by @github-actions in #7312
Other Changes
- Update version.py by @SchrodingersGat in #7252
Full Changelog: 0.15.1...0.15.2