Updated to version v4.0.3

aws-solutions · Oct 23, 2023 · d8cc0d9 · d8cc0d9
1 parent 50ecbe0
commit d8cc0d9
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,12 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 
+## [4.0.3] - 2023-10-25
+
+### Fixed
+
+- Patched urllib3 vulnerability as it is possible for a user to specify a Cookie header and unknowingly leak information via HTTP redirects to a different origin if that user doesn't disable redirects explicitly. For more details: [CVE-2023-43804](https://nvd.nist.gov/vuln/detail/CVE-2023-43804)
+
 ## [4.0.2] - 2023-09-11
 
 ### Fixed