From f88898d5b8e69702b214378311777d0783b16e12 Mon Sep 17 00:00:00 2001 From: Lauri Ojansivu Date: Fri, 10 Oct 2025 22:22:43 +0300 Subject: [PATCH] Updated ChangeLog. --- CHANGELOG.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 7926ce12c..b9e3ad1e7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -24,9 +24,11 @@ Fixing other platforms In Progress. This release adds the following CRITICAL SECURITY FIXES: - [Security Fix: IDOR CWE-639 that affected WeKan 7.80-7.93](https://github.com/wekan/wekan/commit/b87cff1289d2c98ef84d69e171f112ecedb4d843). - Thanks to apitech.fr and xet7. + Thanks to Romain Korpas at apitech.fr and xet7. - [Security Fix: Computational Resource Abuse in Export endpoints](https://github.com/wekan/wekan/commit/d0f118e7af0b2ede517d6d051226c38fa8e557b6). Thanks to Anynymous Security Researcher and xet7. +- [Security Fix FG-VD-22-078: Prevent SVG Billion Laughs Attack](https://github.com/wekan/wekan/commit/30c1597b658b0ef50fd2efc56786e8b0f08ac72c). + Thanks to Nguyen Thanh Nguyen of Fortinet's FortiGuard Labs and xet7. and adds the following new features: