diff --git a/CHANGELOG.md b/CHANGELOG.md
index 664a422d..fb18040a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## Unreleased
+
+- Fixed a security issue in `git-urls` by switching to the maintained fork `chainguard-dev/git-urls` (#1917 by
+  @AlekSi).
+
 ## v3.40.0 - 2024-11-05
 
 - Fixed output of some functions (e.g. `splitArgs`/`splitLines`) not working in