changelog

angrybrad · angrybrad · commit e4e0f4107cd8 · 2026-01-13T15:56:15.000-08:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,7 +3,7 @@
 ## Unreleased
 
 - Fixed a bug where the order’s table was showing the incorrect column heading on the Edit User page.
-- Fixed XSS vulnerabilities.
+- Fixed a high-severity SQL injection vulnerability in the control panel. (GHSA-j3x5-mghf-xvfw)
 
 ## 4.10.1 - 2025-12-31
 
