v2.15.4

Security fix

Fixed authorization checks for WebSocket upgrades, including API key, IP allowlist, rate limiting, connection limits, and Host validation.

Reporter credit

Thanks to @orshih6 for identifying and responsibly disclosing this issue.

Full Changelog: v2.15.3...v2.15.4