diff --git a/README.md b/README.md
index b6c6082..162dee7 100644
--- a/README.md
+++ b/README.md
@@ -121,6 +121,7 @@ To be sure the issue comes from the Grunt plugin, you can check by comparing the
 
 ## Release History
  * _2.2.0_ jsdoc 3.5.0
+    * _2.2.1_ fix version of transitive dependency `marked` to prevent xss
  * _2.1.0_ use `cross-spawn` instead of `cross-spawn-async`, add `generating` and `generated` grunt events
  * _2.0.0_ `private` behavior, `cross-spawn-async` instead of manual windows management
  * _1.1.0_ update to jsdoc 3.4.0 and make dest optional if a config file is set.