diff --git a/release-notes/VERSION b/release-notes/VERSION
index 7503d5bc..88ef225f 100644
--- a/release-notes/VERSION
+++ b/release-notes/VERSION
@@ -122,7 +122,7 @@ Project: woodstox
   for element undefined in DTD
  (reported by ChrisTrenkamp@github)
 #105: W3CSchemaFactory constructor incorrectly references relaxng
-#160: Add limit and configuration setting for maximum nesting for DTD subsets [CVE-2022-xxxxx]
+#160: Add limit and configuration setting for maximum nesting for DTD subsets [CVE-2022-40152]
  (contributed by @pjfanning)
 
 5.3.0 (15-Jul-2019)