From 306e839bd8b1d0cf69db6394278299ede8ed7b24 Mon Sep 17 00:00:00 2001
From: John McLear <john@mclear.co.uk>
Date: Mon, 15 Feb 2021 09:08:44 +0000
Subject: [PATCH] docs: security notification

---
 CHANGELOG.md | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6ee4348f5..e19aba752 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # 1.8.8
 
+### Security patches
+
+* EJS has been updated to 3.1.6 to mitigate an Arbitrary Code Injection
+
 ### Compatibility changes
 
 * Node.js 10.17.0 or newer is now required.