[BEANUTILS-520] BeanUtils2 mitigate CVE-2014-0114.
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index b836a1e..e858f8d 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -57,6 +57,9 @@
       <action issue="BEANUTILS-517" dev="ggregory" type="update" due-to="Gary Gregory">
         Update Apache Commons Collections from 4.2 to 4.3.
       </action>
+      <action issue="BEANUTILS-520" dev="ggregory" type="update" due-to="Melloware">
+        BeanUtils2 mitigate CVE-2014-0114.
+      </action>
     </release>
 
     <release version="1.9.3" date="2016-09-21" description="Bug fix release, now builds with Java 8">