Add CVE to changelog [ci skip]

carlosantoniodasilva · carlosantoniodasilva · commit 53347074021b · 2026-03-16T17:41:25.000-03:00
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,7 +1,7 @@
 ### Unreleased
 
 * security fixes
-  * Fix race condition vulnerability on confirmable "change email" which would allow confirming an email they don't own [#5783](https://github.com/heartcombo/devise/pull/5783) [#5784](https://github.com/heartcombo/devise/pull/5784)
+  * Fix race condition vulnerability on confirmable "change email" which would allow confirming an email they don't own CVE-2026-32700 [#5783](https://github.com/heartcombo/devise/pull/5783) [#5784](https://github.com/heartcombo/devise/pull/5784)
 
 ### 5.0.2 - 2026-02-18
 
