0.15.2

[SchrodingersGat]

Security Advisory

We were recently made aware of a security issue that enables logging in to the API without MFA - even if configured - GHSA-2crp-q9pc-457j

What's Changed

Security Patches

• Merge pull request from GHSA-2crp-q9pc-457j by @SchrodingersGat in Merge pull request from GHSA-2crp-q9pc-457j #7320

Bug Fixes

• [0.15.x] Fix for email template (Fix for email template #7249) by @github-actions in [0.15.x] Fix for email template (#7249) #7251
• [0.15.x] Add Meta subclass for build serializers (Add Meta subclass for build serializers #7315) by @github-actions in [0.15.x] Add Meta subclass for build serializers (#7315) #7316

Devops / Setup Changes

• [0.15.x] fix: SELinux labels for Caddyfile (fix: SELinux labels for Caddyfile #7261) by @github-actions in [0.15.x] fix: SELinux labels for Caddyfile (#7261) #7262
• [0.15.x] Add clearer error message for invalid SITE_URL (Add clearer error message for invalid SITE_URL #7311) by @github-actions in [0.15.x] Add clearer error message for invalid SITE_URL (#7311) #7312

Other Changes

• Update version.py by @SchrodingersGat in Update version.py #7252

Full Changelog: 0.15.1...0.15.2

---

This discussion was created from the release 0.15.2.

[matmair]

Many thanks to @sur5r who discovered GHSA-2crp-q9pc-457j