CHANGELOG-1.5.md

CHANGELOG FOR 1.5.x

v1.5.2 (2020-08-18)

Security release:

• CVE-2020-15143: Remote Code Execution in ParametersParser while using request parameters inside expression language
• CVE-2020-15146: Remote Code Execution in OptionsParser while using request parameters inside expression language

v1.5.1 (2020-01-27)

Security release:

• CVE-2020-5220: Ability to define unintended serialisation groups via HTTP header which might lead to data exposure

v1.5.0 (2019-05-07)

TL;DR

Released ResourceBundle as a standalone package, containing a subtree split of Resource component.