File tree Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Expand file tree Collapse file tree 1 file changed +7
-3
lines changed Original file line number Diff line number Diff line change @@ -6,20 +6,24 @@ All notable changes to this project will be documented in this file.
66
77<!-- add unreleased items here -->
88
9+ ## 6.7.2 -- 2024-05-07
10+
911* Changed
10- * The provided XML validation capabilities are hardened (via [ #1064 ] ; concerns [ #1061 ] )
12+ * The provided XML validation capabilities were explicitly hardened (via [ #1064 ] ; concerns [ #1061 ] )
1113 This is considered a security measure concerning XML external entity (XXE) injection.
1214
1315[ #1061 ] : https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061
1416[ #1064 ] : https://github.com/CycloneDX/cyclonedx-javascript-library/pull/1064
1517
1618## 6.7.1 -- 2024-05-07
1719
18- Reverted v6.7.0, back to v6.6.1
20+ Reverted v6.7.0, back to v6.6.1
21+ Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
1922
2023## 6.7.0 -- 2024-05-07
2124
22- !! THIS VERSION GOT YANKED !!
25+ !! THIS VERSION GOT YANKED !!
26+ Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7
2327
2428* Changed
2529 * The provided XML validation capabilities no longer supports external entities (via [ #1063 ] ; concerns [ #1061 ] )
You can’t perform that action at this time.
0 commit comments