diff --git a/CHANGELOG.md b/CHANGELOG.md
index 265ff550..0108b317 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log
 
+## Version 0.4.1 (April 14, 2021)
+
+### Bug Fixes
+
+- Fix CVE-2021-22539: Malicious project can cause vscode-bazel to run arbitrary executable when linting a \*.bzl file.
+
 ## Version 0.4.0 (August 21, 2020)
 
 ### New Features
diff --git a/package.json b/package.json
index 576263cf..5680393d 100644
--- a/package.json
+++ b/package.json
@@ -2,7 +2,7 @@
     "name": "vscode-bazel",
     "displayName": "Bazel",
     "description": "Bazel BUILD integration",
-    "version": "0.4.0",
+    "version": "0.4.1",
     "publisher": "BazelBuild",
     "license": "Apache-2.0",
     "repository": {