File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -6,20 +6,24 @@ All notable changes to this project will be documented in this file.
6
6
7
7
<!-- add unreleased items here -->
8
8
9
+ ## 6.7.2 -- 2024-05-07
10
+
9
11
* Changed
10
- * The provided XML validation capabilities are hardened (via [ #1064 ] ; concerns [ #1061 ] )
12
+ * The provided XML validation capabilities were explicitly hardened (via [ #1064 ] ; concerns [ #1061 ] )
11
13
This is considered a security measure concerning XML external entity (XXE) injection.
12
14
13
15
[ #1061 ] : https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061
14
16
[ #1064 ] : https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1064
15
17
16
18
## 6.7.1 -- 2024-05-07
17
19
18
- Reverted v6.7.0, back to v6.6.1
20
+ Reverted v6.7.0, back to v6.6.1
21
+ Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
19
22
20
23
## 6.7.0 -- 2024-05-07
21
24
22
- !! THIS VERSION GOT YANKED !!
25
+ !! THIS VERSION GOT YANKED !!
26
+ Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
23
27
24
28
* Changed
25
29
* The provided XML validation capabilities no longer supports external entities (via [ #1063 ] ; concerns [ #1061 ] )
You can’t perform that action at this time.
0 commit comments