diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3a0a020..bb84f5a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,9 @@
+### 0.1.4 / 2020-06-02
+
+- Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by
+  Robert McLaughlin)
+- Change license from MIT to Apache 2.0
+
 ### 0.1.3 / 2017-11-11
 
 - Accept extension names and parameters including uppercase letters
diff --git a/LICENSE.md b/LICENSE.md
index 5861b5c..3a88e51 100644
--- a/LICENSE.md
+++ b/LICENSE.md
@@ -1,4 +1,4 @@
-Copyright 2014-2017 James Coglan
+Copyright 2014-2020 James Coglan
 
 Licensed under the Apache License, Version 2.0 (the "License"); you may not use
 this file except in compliance with the License. You may obtain a copy of the
diff --git a/package.json b/package.json
index 7ec6f19..e4f2f91 100644
--- a/package.json
+++ b/package.json
@@ -7,7 +7,7 @@
                     "websocket"
           ],
           "license": "Apache-2.0",
-          "version": "0.1.3",
+          "version": "0.1.4",
           "engines": {
                     "node": ">=0.8.0"
           },