From 85fe16ee29540c03702ea630fa67b7996ea9853e Mon Sep 17 00:00:00 2001
From: jesopo <github@lolnerd.net>
Date: Fri, 18 Oct 2019 15:25:58 +0100
Subject: [PATCH] update CHANGELOG.md

---
 CHANGELOG.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index f35f09df..4ec93719 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -17,6 +17,7 @@ Changed:
 - `!reloadallmodules` and `SIGUSR1` will not try to reload but rollback to currently-loaded on error
 
 Fixed:
+- Any user was able to add an API KEY (missing `permission` kwarg)
 - Be able to `!disconnect` reconnection attempts (regression, `admin.py`)
 - Strip only unknown tags from fedi `Note` activities - not the tag content too
 - Don't allow users to `!bef`/`!trap` a triggered duck before it has quacked