diff --git a/CHANGELOG b/CHANGELOG
index aed90953d..c03837ebe 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -5,6 +5,7 @@
   with 0 bytes was created by the user
 - fix repair of wrong file extension
 - fix regression in password forgotten function
+- fix security issue when creating hash in password forgotten operation
 
 --------------------------------------------------------------------------------
                      Changes in version 5.1.27