Add CHANGES.rst for #323

Pylons · Feb 1, 2019 · 51172ad · 51172ad
1 parent 19e4228
commit 51172ad
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/CHANGES.rst b/CHANGES.rst
@@ -1,3 +1,12 @@
+Unreleased
+==========
+
+- The URL validator regex has been updated to no longer be vulnerable to a
+  catastrophic backtracking that would have led to an infinite loop. See
+  https://github.com/Pylons/colander/pull/323 and
+  https://github.com/Pylons/colander/issues/290. With thanks to Przemek
+  (https://github.com/p-m-k).
+
 1.6.0 (2019-01-31)
 ==================