diff --git a/CHANGELOG.md b/CHANGELOG.md
index eff298e..442b493 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,12 @@
 # Changelog
 
+## [v2.5.4](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.4) (2021-11-17)
+
+[Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.3...v2.5.4)
+
+**Fixed bugs:**
+
+- Fix authentication bypass by CSRF weakness [GHSA-xm34-v85h-9pg2](https://github.com/solidusio/solidus_auth_devise/security/advisories/GHSA-xm34-v85h-9pg2)
 ## [v2.5.3](https://github.com/solidusio/solidus_auth_devise/tree/v2.5.3) (2021-01-29)
 
 [Full Changelog](https://github.com/solidusio/solidus_auth_devise/compare/v2.5.2...v2.5.3)
diff --git a/lib/spree/auth/version.rb b/lib/spree/auth/version.rb
index f1e29fc..502ee47 100644
--- a/lib/spree/auth/version.rb
+++ b/lib/spree/auth/version.rb
@@ -2,6 +2,6 @@
 
 module Spree
   module Auth
-    VERSION = '2.5.3'
+    VERSION = '2.5.4'
   end
 end