diff --git a/changelog.d/3896.add b/changelog.d/3896.add
new file mode 100644
index 000000000..3124e07dd
--- /dev/null
+++ b/changelog.d/3896.add
@@ -0,0 +1 @@
+Validate Host header for MediaProxy and Uploads