diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6ebfbc10e..cfbb31639 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -14,6 +14,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 - Update bandit to version 1.13.1 resolving a stuck process and unvalidated HTTP/1 headers vulnerabilities
 - Updated CAStore to version 1.0.22 with updated Mozilla certificate bundle after eMudhra Intermediate CA Compromise
 - Update certifi to version 2.18.0, which removes the distrusted emSign roots
+- Update plug_crypto to version 2.2.1, so a malformed shout socket token no longer writes the secret key base to the error log
 - Update Cowboy to address multipart header parsing denial-of-service vulnerabilities.
 - Update cowboy to version 2.19.0 which fixes a memory exhaustion DoS
 - Update Cowlib to address HTTP parsing resource exhaustion and injection vulnerabilities.
diff --git a/changelog.d/plug_crypto-2.2.1.security b/changelog.d/plug_crypto-2.2.1.security
deleted file mode 100644
index 46dcf2002..000000000
--- a/changelog.d/plug_crypto-2.2.1.security
+++ /dev/null
@@ -1 +0,0 @@
-Update plug_crypto to version 2.2.1, so a malformed shout socket token no longer writes the secret key base to the error log