diff --git a/docs/changelog.mdx b/docs/changelog.mdx
index 2f0deea..89cfb53 100644
--- a/docs/changelog.mdx
+++ b/docs/changelog.mdx
@@ -5,6 +5,14 @@ description: 'Release history for the OpenAPI plugin for Payload CMS.'
 
 Notable changes per release. For the full commit-level history, see the [GitHub releases](https://github.com/maximseshuk/payload-plugin-openapi/releases).
 
+<Update label="v0.2.3" description="October 9, 2026">
+
+**Fixes**
+
+- The docs page escapes the spec URL in its inline script. A `specEndpoint` value with `</script>` can no longer close the script tag. The UI `configuration` values now also escape `>`, `&`, U+2028 and U+2029.
+
+</Update>
+
 <Update label="v0.2.2" description="October 8, 2026">
 
 **Fixes**