summaryrefslogtreecommitdiff
path: root/doc/changelog.asciidoc
diff options
context:
space:
mode:
Diffstat (limited to 'doc/changelog.asciidoc')
-rw-r--r--doc/changelog.asciidoc8
1 files changed, 8 insertions, 0 deletions
diff --git a/doc/changelog.asciidoc b/doc/changelog.asciidoc
index c17f35eec..b3f99fb05 100644
--- a/doc/changelog.asciidoc
+++ b/doc/changelog.asciidoc
@@ -19,6 +19,14 @@ breaking changes (such as renamed commands) can happen in minor releases.
v2.4.0 (unreleased)
-------------------
+Security
+~~~~~~~~
+
+- **CVE-2021-41146**: Fix arbitrary command execution on Windows via URL handler
+ argument injection. See the
+ https://github.com/qutebrowser/qutebrowser/security/advisories/GHSA-vw27-fwjf-5qxm[security advisory]
+ for details.
+
Added
~~~~~