diff --git a/CHANGELOG.md b/CHANGELOG.md
index b816343d..84194495 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,8 @@
 ## Unreleased
 
-IMPROVEMENTS:
+## v0.20.3
+
+BUG FIXES:
 * Invalidate JWT with single non-empty string aud on empty bound audiences https://github.com/hashicorp/vault-plugin-auth-jwt/pull/295
 
 ## v0.20.2