- GHSA-8c6x-pfjq-9gr7
Full changelog
paperless-ngx 2.20.15
[!NOTE]
This release addresses a security issue (GHSA-8c6x-pfjq-9gr7) and is recommended for all users. Our sincere thank you to the community members who reported this.
Bug Fixes
- Fix: use only allauth login/logout endpoints @shamoon (#12639)
- Fix: correctly scope mail account enumeration @shamoon (#12636)
- Fix: prevent intermediate change event when CustomFieldQueryAtom operator changes type @ggouzi (#12597)
- Fix: reject invalid requests to API notes endpoint @ggouzi (#12582)