diff --git a/project.spdx.yml b/project.spdx.yml
index 30bfdc5..43ab142 100644
--- a/project.spdx.yml
+++ b/project.spdx.yml
@@ -15,13 +15,13 @@ packages:
 - SPDXID: "SPDXRef-Package-vfork"
   summary: "nVotes MixNet, a fork of Verificatum MixNet."
   copyrightText: "Copyright 2008-2021 Douglas Wikstrom and Agora Voting SL"
-  downloadLocation: "git+https://github.com/agoravoting/vfork.git@4.0.0"
+  downloadLocation: "git+https://github.com/agoravoting/vfork.git@4.0.1"
   filesAnalyzed: false
   homepage: "https://github.com/agoravoting/vfork"
   licenseConcluded:  "NOASSERTION"
   licenseDeclared: "GPL-3.0-only"
   name: "vfork"
-  versionInfo: "4.0.0"
+  versionInfo: "4.0.1"
 - SPDXID: "SPDXRef-Package-libgmp"
   description: "Multiprecision arithmetic library."
   copyrightText: "Copyright (c) 1991 - 2021, Steve M. Robbins <smr@debian.org>, Philipp Matthias Hahn <pmhahn@debian.org>"