From 8a8cf58c5a2414ed127464f326d90c54d6aa4a56 Mon Sep 17 00:00:00 2001 From: Simon Wisselink Date: Mon, 16 May 2022 13:38:45 +0200 Subject: [PATCH] Changelog --- CHANGELOG.md | 3 +++ 1 file changed, 3 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 795c45ee..daab1326 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Security +- Prevent PHP injection through malicious block name or include file name. This addresses CVE-2022- + ### Fixed - Math equation `max(x, y)` didn't work anymore [#721](https://github.com/smarty-php/smarty/issues/721)