diff --git a/CHANGELOG.md b/CHANGELOG.md
index 62f3c79e6..5ca3bf3be 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # main
 
+- Fix possible XSS on generated YARD frameset pages (thanks to @RedYetiDev for finding and patching) (2069e2b).
+- Fix errors when using `@option` on non-method objects (#1508)
+- Support Ruby 3.3 changes in Ripper parser (#1510)
+
 # [0.9.34] - April 12nd, 2023
 
 [0.9.34]: https://github.com/lsegal/yard/compare/v0.9.33...v0.9.34