diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6ee4348f5..e19aba752 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # 1.8.8
 
+### Security patches
+
+* EJS has been updated to 3.1.6 to mitigate an Arbitrary Code Injection
+
 ### Compatibility changes
 
 * Node.js 10.17.0 or newer is now required.