From a5ce7dd7aeb60274b1dca009b9f28a646816ebca Mon Sep 17 00:00:00 2001 From: Paul Makles Date: Mon, 10 Feb 2025 21:40:01 +0000 Subject: [PATCH] docs: update advisory list --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index aa881c3..1e275a6 100644 --- a/README.md +++ b/README.md @@ -407,3 +407,5 @@ db.invites.insertOne({ _id: "enter_an_invite_code_here" }) - (`2024-06-21`) [GHSA-f26h-rqjq-qqjq revoltchat/backend: Unrestricted account creation.](https://github.com/revoltchat/backend/security/advisories/GHSA-f26h-rqjq-qqjq) - (`2024-12-17`) [GHSA-7f9x-pm3g-j7p4 revoltchat/january: January service can call itself recursively, causing heavy load.](https://github.com/revoltchat/january/security/advisories/GHSA-7f9x-pm3g-j7p4) +- (`2025-02-10`) [GHSA-8684-rvfj-v3jq revoltchat/backend: Webhook tokens are freely accessible for users with read permissions.](https://github.com/revoltchat/backend/security/advisories/GHSA-h7h6-7pxm-mc66) +- (`2025-02-10`) [GHSA-h7h6-7pxm-mc66 revoltchat/backend: Nearby message fetch requests can be crafted to fetch entire message history.](https://github.com/revoltchat/backend/security/advisories/GHSA-h7h6-7pxm-mc66)