diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6698a16aa..ac8336747 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,11 @@
+# Upcoming Wekan release
+
+This release adds the following new features:
+
+* [Update xss to version 1.00](https://github.com/wekan/wekan/commit/5b4d75a976244652d3c86e6d46c23d7c11e9ae8e).
+
+Thanks to GitHub user xet7 for contributions.
+
 # v1.01 2018-05-23 Wekan release
 
 This release possibly fixes the following bugs, please test:
diff --git a/package.json b/package.json
index 06b831da9..92dec31e3 100644
--- a/package.json
+++ b/package.json
@@ -29,6 +29,6 @@
     "es6-promise": "^4.2.4",
     "meteor-node-stubs": "^0.4.1",
     "os": "^0.1.1",
-    "xss": "^0.3.8"
+    "xss": "^1.0.0"
   }
 }