{
 "schema": "bumplog.app.v1",
 "generatedAt": "2026-07-26T13:02:49.517Z",
 "slug": "paperless-ngx",
 "name": "Paperless-ngx",
 "repo": "paperless-ngx/paperless-ngx",
 "latestVersion": "v2.20.15",
 "safeToUpdate": "safe",
 "rationale": "This release contains only bug fixes, including a recommended security patch (GHSA-8c6x-pfjq-9gr7) addressing mail account enumeration and login/logout endpoint issues. There are no breaking changes, required migrations, or manual upgrade steps noted.",
 "changelogSummary": "v2.20.15 is a security-focused patch release that all users are encouraged to apply. It closes a disclosed vulnerability (GHSA-8c6x-pfjq-9gr7) by tightening authentication flows to use only the allauth login and logout endpoints, and by correctly scoping mail account enumeration to prevent unauthorized access. Two additional bug fixes ship alongside: one eliminates a spurious change event that could fire when switching operator types on a custom field query, and another rejects malformed requests to the API notes endpoint.",
 "sourceUrl": "https://github.com/paperless-ngx/paperless-ngx/releases/tag/v2.20.15",
 "lastChecked": "2026-06-27",
 "successor": null,
 "url": "https://bumplog.org/apps/paperless-ngx/",
 "badge": "https://bumplog.org/badge/paperless-ngx.svg",
 "lifecycle": null
}