Update CHANGELOG.md

pkgs/package_config/CHANGELOG.md

diff --git a/pkgs/package_config/CHANGELOG.md b/pkgs/package_config/CHANGELOG.md
index 7a20ba9..07bcac7 100644
--- a/pkgs/package_config/CHANGELOG.md
+++ b/pkgs/package_config/CHANGELOG.md
@@ -1,5 +1,7 @@
 ## 3.0.1-wip
 
+- Enforce a "Same-Origin Policy" on `rootUri` to mitigate UNC path injection ([SMB NTLM leak](https://attack.mitre.org/techniques/T1187/)) on Windows.
+
 ## 3.0.0
 
 - Adds discovery API to find both a configuration and its location: