Update v3/UNRELEASED_CHANGELOG.md

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Lea Anthony 2026-02-07 18:49:54 +11:00 committed by GitHub
commit 1479494dfb
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -47,6 +47,7 @@ After processing, the content will be moved to the main changelog and this file
- Restrict GITHUB_TOKEN permissions in workflow files to follow principle of least privilege
- Fix path traversal vulnerability in screen example asset middleware
- Fix command injection vulnerability in setup wizard dependency installation endpoint
- Fix command injection vulnerability in setup wizard dependency installation endpoint
- Update rollup to 3.29.5 to fix XSS vulnerability (CVE-2024-47068)
---