diff --git a/CHANGELOG.md b/CHANGELOG.md index 17d29ccca..5e3fcec75 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,10 @@ +# 4.18.3 (March 9, 2024) + +Use spaces instead of parentheses for SQL sanitization. + +This still solves the problem of negative numbers creating a line comment, but this avoids breaking edge cases such as +`set foo to $1` where the substitution is taking place in a location where an arbitrary expression is not allowed. + # 4.18.2 (March 4, 2024) Fix CVE-2024-27289