CHANGELOG.md in pageflow-14.5.1 vs CHANGELOG.md in pageflow-14.5.2

@@ -1,6 +1,23 @@
 # CHANGELOG
 
+### Version 14.5.2
+
[phone]
+
+[Compare changes](https://github.com/codevise/pageflow/compare/v14.5.1...v14.5.2)
+
+##### Security
+
+- Fix
+  [GHSA-qcqv-38jg-2r43](https://github.com/codevise/pageflow/security/advisories/GHSA-qcqv-38jg-2r43):
+  Insecure direct object reference in membership update endpoint
+  ([#1862](https://github.com/codevise/pageflow/pull/1862))
+- Fix
+  [GHSA-wrrw-crp8-979q](https://github.com/codevise/pageflow/security/advisories/GHSA-wrrw-crp8-979q):
+  Sensitive user data extraction via Ransack query injection
+  ([#1862](https://github.com/codevise/pageflow/pull/1862))
+
 ### Version 14.5.1
 
 2019-10-31
 
 [Compare changes](https://github.com/codevise/pageflow/compare/v14.5.0...v14.5.1)