docs: CVEs fixed on 4.1.0 (apache#31352)

preset-io · Dec 9, 2024 · ae8c686 · ae8c686
1 parent 0133bab
commit ae8c686
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/docs/docs/security/cves.mdx b/docs/docs/security/cves.mdx
@@ -2,6 +2,14 @@
 title: CVEs fixed by release
 sidebar_position: 2
 ---
+#### Version 4.1.0
+
+| CVE            | Title                                                                              | Affected |
+|:---------------|:-----------------------------------------------------------------------------------|---------:|
+| CVE-2024-53947 | Improper SQL authorisation, parse for specific postgres functions                  |  < 4.1.0 |
+| CVE-2024-53948 | Error verbosity exposes metadata in analytics databases                            |  < 4.1.0 |
+| CVE-2024-53949 | Lower privilege users are able to create Role when FAB_ADD_SECURITY_API is enabled |  < 4.1.0 |
+
 #### Version 4.0.2
 
 | CVE            | Title                       | Affected |