From b38637d04387130134957cbc8a4aaa50e2ee737b Mon Sep 17 00:00:00 2001 From: sharath <29162020+tnfssc@users.noreply.github.com> Date: Sun, 20 Jul 2025 16:40:11 +0000 Subject: [PATCH] hotfix(vuln): send-welcome-email --- backend/services/email_api.py | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/backend/services/email_api.py b/backend/services/email_api.py index 2f1ebdfe..f282c3e1 100644 --- a/backend/services/email_api.py +++ b/backend/services/email_api.py @@ -21,6 +21,10 @@ async def send_welcome_email( request: SendWelcomeEmailRequest, _: bool = Depends(verify_admin_api_key) ): + raise HTTPException( + status_code=403, + detail="Forbidden" + ) try: def send_email():