diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9e825952..c3d4fbb8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -29,6 +29,10 @@
 - Remove link to unimplemented page (#827)
 - Fix displaying not found page when submitting a duplicated blocklist email (#831)
 
+### Security
+
+- Validate spoofing of Create activity
+
 ## [0.5.0] - 2020-06-21
 
 ### Added
@@ -59,10 +63,6 @@
 - Don't show boosts and likes for "all" and "local" in timelines (#781)
 - Fix liking and boosting posts on remote instances (#762)
 
-### Security
-
-- Validate spoofing of Create activity
-
 ## [0.4.0] - 2019-12-23
 
 ### Added