summary refs log tree commit diff
path: root/changelog.d
diff options
context:
space:
mode:
Diffstat (limited to 'changelog.d')
-rw-r--r--changelog.d/5133.bugfix1
1 files changed, 1 insertions, 0 deletions
diff --git a/changelog.d/5133.bugfix b/changelog.d/5133.bugfix
new file mode 100644
index 0000000000..be6474a692
--- /dev/null
+++ b/changelog.d/5133.bugfix
@@ -0,0 +1 @@
+Switch to using a cryptographically-secure random number generator for token strings, ensuring they cannot be predicted by an attacker. Thanks to @opnsec for identifying and responsibly disclosing this issue!