diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2dbeb1aee17..956e76a522d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -12,6 +12,7 @@
 * #5001: Ensure that IoT roles iot-tenant-service/iot-device-connection have distinct perms sets (#5019)
 * #5031: Bump postgresql-jdbc from 42.2.13 -> 42.2.14 
 * #5047: Ensure that application of end user network policy does not affect traffic between EnMasse components.
+* #5091: [CVE-2020-14319] Deny mutation operations unless an existing session exists