Make changes more precise [flori#424]

marcandre · Jun 30, 2020 · d4b238f · d4b238f
1 parent f8fa987
commit d4b238f
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/CHANGES.md b/CHANGES.md
@@ -1,7 +1,8 @@
 # Changes
 
 ## 2019-12-11 (2.3.0)
- * Fix default of `create_additions` to always be false [CVE-2020-10663]
+ * Fix default of `create_additions` to always be false for `JSON(user_input)`
+   and `JSON.parse(user_input, nil)` [CVE-2020-10663]
  * Fix passing args all #to_json in json/add/*.
  * Fix encoding issues
  * Fix issues of keyword vs positional parameter