Updated ChangeLog

danielfernandez · danielfernandez · commit 4a04e373b7a5 · 2021-11-28T02:41:33.000+01:00
diff --git a/thymeleaf-spring3/ChangeLog.txt b/thymeleaf-spring3/ChangeLog.txt
@@ -1,3 +1,9 @@
+3.0.13
+======
+- Fixed CVE-2021-43466: Specific scenarios in template injection may lead to remote code execution.
+- Fixed incorrect double-unescaping of request parameters breaking processing of forms during restricted mode checks.
+
+
 3.0.12
 ======
 - Fixed memory leak at ThymeleafViewResolver when redirects were being performed to dynamically built URLs.
diff --git a/thymeleaf-spring4/ChangeLog.txt b/thymeleaf-spring4/ChangeLog.txt
@@ -1,3 +1,9 @@
+3.0.13
+======
+- Fixed CVE-2021-43466: Specific scenarios in template injection may lead to remote code execution.
+- Fixed incorrect double-unescaping of request parameters breaking processing of forms during restricted mode checks.
+
+
 3.0.12
 ======
 - Fixed memory leak at ThymeleafViewResolver when redirects were being performed to dynamically built URLs.
diff --git a/thymeleaf-spring5/ChangeLog.txt b/thymeleaf-spring5/ChangeLog.txt
@@ -1,3 +1,9 @@
+3.0.13
+======
+- Fixed CVE-2021-43466: Specific scenarios in template injection may lead to remote code execution.
+- Fixed incorrect double-unescaping of request parameters breaking processing of forms during restricted mode checks.
+
+
 3.0.12
 ======
 - Fixed memory leak at ThymeleafViewResolver when redirects were being performed to dynamically built URLs.
