Add changelog for #4035

This commit is contained in:
Mark Backman
2026-03-15 08:56:54 -04:00
parent 24c3d23229
commit e8415b7451

View File

@@ -0,0 +1 @@
- Bumped PyJWT minimum version from 2.10.1 to 2.12.0 in the `livekit` extra to address CVE-2026-32597 (GHSA-752w-5fwx-jx9f), where PyJWT <= 2.11.0 accepted unknown `crit` header extensions.