From 506ed3866ddeebd2cf6245ede7365fbe1c172b95 Mon Sep 17 00:00:00 2001
From: "David I. Lehn" <dlehn@digitalbazaar.com>
Date: Tue, 24 Mar 2026 16:31:33 -0400
Subject: [PATCH] Fix missing CVE ID.

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1da17d4a0..9fba55229 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -48,7 +48,7 @@ Forge ChangeLog
     certificate (without these extensions) to act as a CA and sign other
     certificates, which node-forge will accept as valid.
   - Reported by Doruk Tan Ozturk (@peaktwilight) - doruk.ch
-  - CVE ID: [CVE-TBD]()
+  - CVE ID: [CVE-2026-33896](https://www.cve.org/CVERecord?id=CVE-2026-33896)
   - GHSA ID: [GHSA-2328-f5f3-gj25](https://github.com/digitalbazaar/forge/security/advisories/GHSA-2328-f5f3-gj25)
 
 ### Changed