diff --git a/CHANGES.md b/CHANGES.md
index 88af57b..f1664d5 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -1,5 +1,9 @@
 ### Next version
 
+* Add projection EPSG:7855.
+* Replace express-brute with rate-limiter-flexible (fixes GHSA-984p-xq9m-4rjw).
+* Update to json5 2.2.3 (fixes CVE-2022-46175).
+
 ### 4.0.0
 
 * Removed conversion service (no longer used in TerriaJS 8+).