diff --git a/ChangeLog.d/pkcs-free-stale-pointers.txt b/ChangeLog.d/pkcs-free-stale-pointers.txt
index b56a62cc57..2c29fed5ef 100644
--- a/ChangeLog.d/pkcs-free-stale-pointers.txt
+++ b/ChangeLog.d/pkcs-free-stale-pointers.txt
@@ -3,4 +3,4 @@ Security
      an mbedtls_pkcs7 context across parse -> free -> parse -> free cycles. The
      function now resets the context after freeing it, ensuring stale
      signed_data.signers.next pointers cannot be walked by a later free
-     operation.
+     operation. CVE-2026-50579