add change notes

This commit is contained in:
thiggy1342
2022-06-16 01:04:50 +00:00
committed by GitHub
parent b078430faf
commit 056fa71f3e

View File

@@ -0,0 +1,5 @@
## 0.2.3
### Minor Analysis Improvements
- Calls to `Zip::File.open` and `Zip::File.new` have been added as `FileSystemAccess` sinks. As a result queries like `rb/path-injection` now flag up cases where users may access arbitrary archive files.