Update CHANGES.txt

Pylons · Aug 14, 2024 · 913fa2c · 913fa2c
1 parent f2e92f3
commit 913fa2c
Showing 1 changed file with 14 additions and 0 deletions.
diff --git a/CHANGES.txt b/CHANGES.txt
@@ -1,3 +1,17 @@
+1.8.8 (2024-08-13)
+------------------
+
+Security Fix
+~~~~~~~~~~~~
+
+- The use of WebOb's Response object to redirect a request to a new location
+  can lead to an open redirect if the Location header is not a full URI.
+
+  See https://github.com/Pylons/webob/security/advisories/GHSA-mg3v-6m49-jhp3
+  and CVE-2024-42353
+
+  Thanks to Sara Gao for the report
+
 1.8.7 (2021-02-17)
 ------------------