X-Git-Url: https://git.p6c8.net/jirafeau.git/blobdiff_plain/471c7b967a8ca4efb933aa93a89665c1bb466706..57b10c2bca7fd2727c3eb131bf4d7030094781ed:/CHANGELOG.md

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 11a3fcd..31b9ec0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@
 
 - Removed the download button and the corresponding link for encrypted files from the admin interface
 - Fixed an issue with sending the wrong filesize after decrypting an encrypted file
+- Fixed the possibility to bypass the check for CVE-2022-30110 (prevent preview of SVG images) by sending a manipulated HTTP request with a MIME type like "image/svg+XML".
 - We now provide Docker images for AMD64 and ARM64 systems
 - Lots of code refactoring and cleanup
 - Few more little fixes