Skip to content

Commit

Permalink
Version 3.0.5
Browse files Browse the repository at this point in the history
  • Loading branch information
mshibuya committed Nov 29, 2023
1 parent 863d425 commit 5316b35
Show file tree
Hide file tree
Showing 2 changed files with 9 additions and 1 deletion.
8 changes: 8 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,14 @@ This project adheres to [Semantic Versioning](http://semver.org/).

## [Unreleased]

## 3.0.5 - 2023-11-29

### Fixed
* Remove unnecessary if clause within #filename left in the uploader template (@rajyan, [#2711](https://github.com/carrierwaveuploader/carrierwave/pull/2711))

### Security
* Fix Content-Type allowlist bypass vulnerability, possibly leading to XSS (@mshibuya, [863d425](https://github.com/carrierwaveuploader/carrierwave/commit/863d425c76eba12c3294227b39018f6b2dccbbf3), [GHSA-gxhx-g4fq-49hj](https://github.com/carrierwaveuploader/carrierwave/security/advisories/GHSA-gxhx-g4fq-49hj))

## 3.0.4 - 2023-10-08

### Fixed
Expand Down
2 changes: 1 addition & 1 deletion lib/carrierwave/version.rb
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
module CarrierWave
VERSION = "3.0.4".freeze
VERSION = "3.0.5".freeze
end

0 comments on commit 5316b35

Please sign in to comment.