diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6476f58..db2d621 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,7 @@
+### 0.7.2.1 / 2020-06-05
+
+- Bump websocket-extensions dependency to 0.15 to address CVE-2020-7663
+
 ### 0.7.2 / 2020-05-22
 
 - Emit `ping` and `pong` events from the `Server` driver
diff --git a/websocket-driver.gemspec b/websocket-driver.gemspec
index cf1def0..69073ea 100644
--- a/websocket-driver.gemspec
+++ b/websocket-driver.gemspec
@@ -1,6 +1,6 @@
 Gem::Specification.new do |s|
   s.name     = 'websocket-driver'
-  s.version  = '0.7.2'
+  s.version  = '0.7.2.1'
   s.summary  = 'WebSocket protocol handler with pluggable I/O'
   s.author   = 'James Coglan'
   s.email    = 'jcoglan@gmail.com'
@@ -24,7 +24,7 @@ Gem::Specification.new do |s|
 
   s.files = files
 
-  s.add_dependency 'websocket-extensions', '>= 0.1.0'
+  s.add_dependency 'websocket-extensions', '>= 0.1.5'
 
   s.add_development_dependency 'eventmachine'
   s.add_development_dependency 'permessage_deflate'