diff --git a/CHANGELOG.md b/CHANGELOG.md
index ab9619ce1abe..1caaea72c527 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -39,6 +39,10 @@ Main (unreleased)
 
 - Fix issue with windows_exporter defaults not being set correctly. (@mattdurham)
 
+### Security
+
+- Fix CVE-2023-47108 by bumping `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` to v0.46.0 and correspondingly refactor. (@hainenber)
+
 v0.38.0 (2023-11-21)
 --------------------
 
@@ -207,7 +211,6 @@ v0.38.0 (2023-11-21)
 - `loki.source.windowsevent` and `loki.source.*` changed to use a more robust positions file to prevent corruption on reboots when writing
   the positions file. (@mattdurham)
 
-- Fix CVE-2023-47108 by bumping `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` to v0.46.0 and correspondingly refactor. (@hainenber)
 
 v0.37.4 (2023-11-06)
 -----------------