Skip to content

Commit 8d8d00a

Browse files
committed
Add missing preamble to changelog for v14.0.2
1 parent 545d566 commit 8d8d00a

1 file changed

Lines changed: 5 additions & 0 deletions

File tree

‎CHANGELOG.md‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,11 @@
22

33
## v14.0.2
44

5+
This update fixes a CVSS v3 Moderate (5.4) security vulnerability identified in
6+
@simplewebauthn/server. See the security advisory linked below for more information.
7+
8+
**Changes:**
9+
510
- **[server]** Revamped certificate revocation logic to only cryptographically verify and process
611
CRLs from certificates that chained back to an RP-chosen trust anchor
712
([GHSA-2g3p-m8c9-hhwh](https://github.com/MasterKale/SimpleWebAuthn/security/advisories/GHSA-2g3p-m8c9-hhwh))

0 commit comments

Comments
 (0)