diff --git a/README.md b/README.md
index 2d38581..59a00ea 100644
--- a/README.md
+++ b/README.md
@@ -63,6 +63,11 @@ MIT
 Changelog
 =========
 
+
+## [1.2.2] - 2019-12-11
+### Changed
+- security fix: sanitize `pid` parameter to fix arbitrary code execution vulnerability
+
 ## [1.2.1] - 2018-11-05
 ### Changed
 - added missing LICENSE file
diff --git a/package.json b/package.json
index 6bd1bb5..fa37804 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "tree-kill",
-  "version": "1.2.1",
+  "version": "1.2.2",
   "description": "kill trees of processes",
   "main": "index.js",
   "types": "index.d.ts",