diff --git a/CHANGELOG.md b/CHANGELOG.md index 1e66ebd..ae7a29c 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,8 @@ # Changelog -## v0.4.4 (TBA) +## v0.4.4 (2019-11-22) + +**Note:** This release contains an important security fix. * [`PowAssent.Plug`] Now uses `String.to_existing_atom/1` in `PowAssent.Plug.providers_for_current_user/1` * [`PowAssent.Plug`] Fixed security issue by removing `String.to_atom/1` for user provided binary in `PowAssent.Plug.authorize_url/3` and `PowAssent.Plug.callback/4`