📰

pypa · Apr 24, 2021 · 0e4938d · 0e4938d
1 parent ca832b2
commit 0e4938d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/news/9827.bugfix.rst b/news/9827.bugfix.rst
@@ -0,0 +1,3 @@
+**SECURITY**: Stop splitting on unicode separators in git references,
+which could be maliciously used to install a different revision on the
+repository.