From 182c46a7460ac2a1b19dbf48e1e74ea21bb2336c Mon Sep 17 00:00:00 2001 From: Deniz Onur Duzgun <59659739+dduzgun-security@users.noreply.github.com> Date: Mon, 10 Mar 2025 11:40:06 -0400 Subject: [PATCH] update: changelog 24683.txt (#25329) --- .changelog/24683.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.changelog/24683.txt b/.changelog/24683.txt index af07d6a99..fe6617b27 100644 --- a/.changelog/24683.txt +++ b/.changelog/24683.txt @@ -1,3 +1,3 @@ ```release-note:security -api: sanitize the SignedIdentities in allocations to prevent privilege escalation through unredacted workload identity token impersonation associated with ACL policies. +api: sanitize the SignedIdentities in allocations to prevent privilege escalation through unredacted workload identity token impersonation associated with ACL policies. ([CVE-2025-1296](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-1296)) ```