Security Advisories

There are two security advisories associated with this release:

• https://github.com/inventree/InvenTree/security/advisories/GHSA-vx3h-qwqw-r2wq
• https://github.com/inventree/InvenTree/security/advisories/GHSA-wp3m-jhgv-rhqr

Thanks to @febin0x10 for reporting these vulnerabilities. More information is available on their blog: https://www.getastra.com/blog/vulnerability/stored-xss-inventree/

What's Changed

Security Patches

• Merge commit from fork by @SchrodingersGat in https://github.com/inventree/InvenTree/pull/8229
• Markdown xss backport by @SchrodingersGat in https://github.com/inventree/InvenTree/pull/8244

Bug Fixes

• [0.16.x] Fix build item over-allocation checks (#8235) by @github-actions in https://github.com/inventree/InvenTree/pull/8241

Other Changes

• Update version.py by @SchrodingersGat in https://github.com/inventree/InvenTree/pull/8214

Full Changelog: https://github.com/inventree/InvenTree/compare/0.16.4...0.16.5