diff --git a/api/CHANGELOG.md b/api/CHANGELOG.md index fe93dcf1b2..6073f71f0c 100644 --- a/api/CHANGELOG.md +++ b/api/CHANGELOG.md @@ -32,7 +32,7 @@ All notable changes to the **Prowler API** are documented in this file. ### 🔐 Security -- SAML logins now link to an existing account only when the asserted email domain matches the ACS endpoint and the user is already a member of that domain's tenant, fixing a cross-tenant account takeover [(GHSA-h8m9-jgf8-vwvp)](https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp) [(#XXXXX)](https://github.com/prowler-cloud/prowler/pull/XXXXX) +- SAML logins now link to an existing account only when the asserted email domain matches the ACS endpoint and the user is already a member of that domain's tenant, fixing a cross-tenant account takeover [(GHSA-h8m9-jgf8-vwvp)](https://github.com/prowler-cloud/prowler/security/advisories/GHSA-h8m9-jgf8-vwvp) ---