diff --git a/CHANGELOG.md b/CHANGELOG.md
index a082fd64838c4..3fbf6760ac329 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -6,15 +6,16 @@ been added to each release, please refer to the [blog](https://blog.gitea.io).
 
 ## [1.13.7](https://github.com/go-gitea/gitea/releases/tag/v1.13.7) - 2021-04-07
 
+* SECURITY
+  * Update to bluemonday-1.0.6 (#15294) (#15298)
+  * Clusterfuzz found another way (#15160) (#15169)
 * API
   * Fix wrong user returned in API (#15139) (#15150)
 * BUGFIXES
   * Add 'fonts' into 'KnownPublicEntries' (#15188) (#15317)
-  * Update to bluemonday-1.0.6 (#15294) (#15298)
   * Speed up `enry.IsVendor` (#15213) (#15246)
   * Response 404 for diff/patch of a commit that not exist (#15221) (#15238)
   * Prevent NPE in CommentMustAsDiff if no hunk header (#15199) (#15201)
-  * Clusterfuzz found another way (#15160) (#15169)
 * MISC
   * Add size to Save function (#15264) (#15271)