瀏覽代碼

Docs: Changelog. [skip ci]

Piotrek Koszuliński 7 年之前
父節點
當前提交
6ff7face07
共有 1 個文件被更改,包括 9 次插入0 次删除
  1. 9 0
      packages/ckeditor5-link/CHANGELOG.md

+ 9 - 0
packages/ckeditor5-link/CHANGELOG.md

@@ -1,6 +1,15 @@
 Changelog
 =========
 
+## [10.0.1](https://github.com/ckeditor/ckeditor5-link/compare/v10.0.0...v10.0.1) (2018-05-22)
+
+### Bug fixes
+
+* Fixed a cross-site scripting (XSS) vulnerability which allowed remote attackers to inject arbitrary web script through a crafted href attribute of a link (A) element. [CVE-2018-11093](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11093). ([8cb782e](https://github.com/ckeditor/ckeditor5-link/commit/8cb782e))
+
+  This issue was reported indepdentently by Toan Chi Nguyen from [Techlab Corporation](https://www.techlabcorp.com/) and [Michal Bazyli](https://www.linkedin.com/in/michal-bazyli-6a3111144/). Thank you!
+
+
 ## [10.0.0](https://github.com/ckeditor/ckeditor5-link/compare/v1.0.0-beta.4...v10.0.0) (2018-04-25)
 
 ### Other changes