From 79be126189494fec351e5f4235644235f1f115ad Mon Sep 17 00:00:00 2001 From: Daniel Vaz Gaspar Date: Thu, 30 Nov 2023 14:43:12 +0000 Subject: [PATCH] docs: update CVEs fixed on 3.0.0 (#26149) --- docs/docs/security/cves.mdx | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/docs/docs/security/cves.mdx b/docs/docs/security/cves.mdx index 0550a51dc..ea6ac0b65 100644 --- a/docs/docs/security/cves.mdx +++ b/docs/docs/security/cves.mdx @@ -1,9 +1,18 @@ --- -title: CVEs by release +title: CVEs fixed by release hide_title: true sidebar_position: 2 --- +#### Version 3.0.0 + +| CVE | Title | Affected | +|:---------------|:------------------------------------------------------------------------|---------:| +| CVE-2023-42502 | Open Redirect Vulnerability | < 3.0.0 | +| CVE-2023-42504 | Lack of rate limiting allows for possible denial of service | < 3.0.0 | +| CVE-2023-42505 | Sensitive information disclosure on db connection details | < 3.0.0 | + + #### Version 2.1.2 | CVE | Title | Affected |