v4.6.2

Iain Powrierequested to merge
dev into master

Changelog

--- [4.6.2] - 2025/12/15

NOTE From this version onwards, Python 3.9 will no longer work with Crafty

Bug fixes

  • Refactor translation parsing on creation pages (Merge Request)
  • [CVE-2025-14700] Security: Prevent users being able to access unsafe builtin attributes w/ jinja expressions (Merge Request)
  • [CVE-2025-14701] Security: Prevent MOTDs from being able to inject HTML (Merge Request)
  • Fix functionality of the webhook test button (Merge Request)

Tweaks

  • Update documentation reference url in API index (Merge Request)
  • Bump Orjson to 3.11.4 to resolve support for Python 3.14 (Merge Request)

Merge request reports