diff --git a/HISTORY.md b/HISTORY.md index 7eddd21ba..291e85969 100644 --- a/HISTORY.md +++ b/HISTORY.md @@ -6,8 +6,10 @@ All notable changes to this project will be documented in this file. +## 6.7.2 -- 2024-05-07 + * Changed - * The provided XML validation capabilities are hardened (via [#1064]; concerns [#1061]) + * The provided XML validation capabilities were explicitly hardened (via [#1064]; concerns [#1061]) This is considered a security measure concerning XML external entity (XXE) injection. [#1061]: https://github.com/CycloneDX/cyclonedx-javascript-library/issues/1061 @@ -15,11 +17,13 @@ All notable changes to this project will be documented in this file. ## 6.7.1 -- 2024-05-07 -Reverted v6.7.0, back to v6.6.1 +Reverted v6.7.0, back to v6.6.1 +Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7 ## 6.7.0 -- 2024-05-07 -!! THIS VERSION GOT YANKED !! +!! THIS VERSION GOT YANKED !! +Reason: https://github.com/CycloneDX/cyclonedx-javascript-library/security/advisories/GHSA-38gf-rh2w-gmj7 * Changed * The provided XML validation capabilities no longer supports external entities (via [#1063]; concerns [#1061])