Skip to content

Commit 9adb16d

Browse files
committed
chore: prep v6.7.2
Signed-off-by: Jan Kowalleck <[email protected]>
1 parent 8054a4c commit 9adb16d

File tree

1 file changed

+7
-3
lines changed

1 file changed

+7
-3
lines changed

HISTORY.md

Lines changed: 7 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,20 +6,24 @@ All notable changes to this project will be documented in this file.
66

77
<!-- add unreleased items here -->
88

9+
## 6.7.2 -- 2024-05-07
10+
911
* Changed
10-
* The provided XML validation capabilities are hardened (via [#1064]; concerns [#1061])
12+
* The provided XML validation capabilities were explicitly hardened (via [#1064]; concerns [#1061])
1113
This is considered a security measure concerning XML external entity (XXE) injection.
1214

1315
[#1061]: https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061
1416
[#1064]: https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1064
1517

1618
## 6.7.1 -- 2024-05-07
1719

18-
Reverted v6.7.0, back to v6.6.1
20+
Reverted v6.7.0, back to v6.6.1
21+
Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
1922

2023
## 6.7.0 -- 2024-05-07
2124

22-
!! THIS VERSION GOT YANKED !!
25+
!! THIS VERSION GOT YANKED !!
26+
Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
2327

2428
* Changed
2529
* The provided XML validation capabilities no longer supports external entities (via [#1063]; concerns [#1061])

0 commit comments

Comments
 (0)