dev: Update CHANGELOG

nicholaspcr · nicholaspcr · commit 1598ef12b45b · 2026-03-06T09:55:19.000-03:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -27,6 +27,10 @@ For details about compatibility between different releases, see the **Commitment
 
 - The timestamp of the udp packet is now always correct when the 'Schedule downlink late' is enabled for the gateway and downlink scheduling hits the duty cycle limit.
 
+### Security
+
+- HTML-escape gRPC error messages and error detail attributes to prevent reflected XSS in API error responses.
+
 ## [3.35.2] - 2026-01-30
 
 ### Changed
