diff --git a/CHANGELOG.md b/CHANGELOG.md
index e8cd0fc9..9c977fd8 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,8 +1,14 @@
+## 1.1.1 (May 27, 2022). Tested on Artifactory 7.38.10 and Xray 3.49.0
+
+IMPROVEMENTS:
+
+* Upgrade `gopkg.in/yaml.v3` to v3.0.0 for [CVE-2022-28948](https://nvd.nist.gov/vuln/detail/CVE-2022-28948) [[GH-42]](https://github.com/jfrog/terraform-provider-project/pull/42)
+
 ## 1.1.0 (Apr 13, 2022). Tested on Artifactory 7.37.15 and Xray 3.47.3
 
 IMPROVEMENTS:
 
-* Documentation improved for `project` resource to include limitations in Note section 
+* Documentation improved for `project` resource to include limitations in Note section
 [(#27)](https://github.com/jfrog/terraform-provider-project/issues/27),
 [[GH-32]](https://github.com/jfrog/terraform-provider-project/pull/32)
 
@@ -10,15 +16,14 @@ IMPROVEMENTS:
 
 BUG FIXES:
 
-* Project Key validation fixed as per the latest version 
+* Project Key validation fixed as per the latest version
 [(#22)](https://github.com/jfrog/terraform-provider-project/issues/22),
-[[GH-25]](https://github.com/jfrog/terraform-provider-project/pull/25) 
+[[GH-25]](https://github.com/jfrog/terraform-provider-project/pull/25)
 
 ## 1.0.3 (Feb 24, 2022)
 
 BUG FIXES:
 
 * resource/project: Add `ForceNew` field to `key` attribute to ensure resource is destroyed and recreated when key is changed
-[(#23)](https://github.com/jfrog/terraform-provider-project/issues/23), 
+[(#23)](https://github.com/jfrog/terraform-provider-project/issues/23),
 [[GH-24]](https://github.com/jfrog/terraform-provider-project/pull/24)
-  
diff --git a/go.mod b/go.mod
index 23d55d25..566247f9 100644
--- a/go.mod
+++ b/go.mod
@@ -68,7 +68,7 @@ require (
 	google.golang.org/protobuf v1.28.0 // indirect
 	gopkg.in/asn1-ber.v1 v1.0.0-20181015200546-f715ec2f112d // indirect
 	gopkg.in/ldap.v2 v2.5.1 // indirect
-	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
+	gopkg.in/yaml.v3 v3.0.0 // indirect
 )
 
 go 1.18
diff --git a/go.sum b/go.sum
index da54464a..e513ef9b 100644
--- a/go.sum
+++ b/go.sum
@@ -380,7 +380,7 @@ gopkg.in/yaml.v2 v2.2.4/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.3.0 h1:clyUAQHOM3G0M3f5vQj7LuJrETvjVot3Z5el9nffUtU=
 gopkg.in/yaml.v2 v2.3.0/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
-gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b h1:h8qDotaEPuJATrMmW04NCwg7v22aHH28wwpauUhK9Oo=
-gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
+gopkg.in/yaml.v3 v3.0.0 h1:hjy8E9ON/egN1tAYqKb61G10WtihqetD4sz2H+8nIeA=
+gopkg.in/yaml.v3 v3.0.0/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
 honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=
 honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4=