diff --git a/CHANGELOG b/CHANGELOG
index 5268e5fbf..e898e21ac 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -3,7 +3,8 @@
 --------------------------------------------------------------------------------
 - fix for CVE-2019-12744, add .htaccess file to data directory, better
   documentation for installing seeddms
-- fix for CVE-2019-12745, propperly escape strings used in Select2 js library
+- fix for CVE-2019-12745 and CVE-2019-12801, propperly escape strings used
+  in Select2 js library used by UsrMgr and GroupMgr
 - do not show attributes in search results in extra column anymore
 - fix setting language during login (Closes #437)
 - fix indexing documents even if no preIndexDocument hook is set (Closes #437)