diff --git a/release-notes/opensearch-security.release-notes-1.3.18.0.md b/release-notes/opensearch-security.release-notes-1.3.18.0.md
index e717a8e2fd..43ef02fcef 100644
--- a/release-notes/opensearch-security.release-notes-1.3.18.0.md
+++ b/release-notes/opensearch-security.release-notes-1.3.18.0.md
@@ -5,3 +5,4 @@ Compatible with OpenSearch 1.3.18
 ### Maintenance
 
 * Bump bouncycastle to 1.78.1 and kafka to 3.7.0 ([#4437](https://github.com/opensearch-project/security/pull/4437))
+* Bump jose to address CVE ([#4549](https://github.com/opensearch-project/security/pull/4549))