diff --git a/changelog/1.36.2.md b/changelog/1.36.2.md new file mode 100644 index 000000000..9a3ee2dbf --- /dev/null +++ b/changelog/1.36.2.md @@ -0,0 +1,21 @@ +--- +title: "1.36.2" +description: "Released on 12/05/2022" +--- + +### Breaking changes ❗ + +There are no breaking changes in 1.36.2. + +### Features ✨ + +There are no new features in 1.36.2. + +### Bug fixes 🐛 + +- Fixed an issue where operations on API keys were not audit-logged. + +### Security updates 🔐 + +- Fixed an issue where an attacker could craft a malicious DevURL redirect link + to exfiltrate a token that allows accessing that user's devURLs. diff --git a/manifest.json b/manifest.json index ebddf467b..fa7a36f9b 100644 --- a/manifest.json +++ b/manifest.json @@ -587,6 +587,9 @@ { "path": "./changelog/1.36.0.md", "children": [ + { + "path": "./changelog/1.36.2.md" + }, { "path": "./changelog/1.36.1.md" }