diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9cb02382..6fd40709 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,20 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 4.0.2 (2023-12-07)
+
+### Security issues
+
+This release fixes different security issues reported by the potsda.mn collective. Please make sure to upgrade as soon as possible.
+
+### Fixed
+
+- Fixes XSS issues in notifier and participant and event contacts list formatting
+
+
+* fix(front-end): add more security fixes for formatted lists and notifier ([1af8e37](https://framagit.org/framasoft/mobilizon/commits/1af8e37))
+
+
 ## 4.0.1 (2023-12-07)
 
 ### Security issues
diff --git a/mix.exs b/mix.exs
index dc4a0e4e..27fde9da 100644
--- a/mix.exs
+++ b/mix.exs
@@ -1,7 +1,7 @@
 defmodule Mobilizon.Mixfile do
   use Mix.Project
 
-  @version "4.0.1"
+  @version "4.0.2"
 
   def project do
     [
diff --git a/package.json b/package.json
index 77c88ae6..809abd5f 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "mobilizon",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "private": true,
   "scripts": {
     "dev": "vite",