diff --git a/CHANGELOG.md b/CHANGELOG.md
index dff6d69e4..6e5e7d130 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [6.3.6](https://github.com/karma-runner/karma/compare/v6.3.5...v6.3.6) (2021-10-25)
+
+
+### Bug Fixes
+
+* bump vulnerable ua-parser-js version ([6f2b2ec](https://github.com/karma-runner/karma/commit/6f2b2ec6ed0218980eabf2cbf44e0c8f16fee661)), closes [#3713](https://github.com/karma-runner/karma/issues/3713)
+
 ## [6.3.5](https://github.com/karma-runner/karma/compare/v6.3.4...v6.3.5) (2021-10-20)
 
 
diff --git a/package-lock.json b/package-lock.json
index eccbce1e1..d3c7357d2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "karma",
-  "version": "6.3.5",
+  "version": "6.3.6",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index bda5d4f23..dae4f3f83 100644
--- a/package.json
+++ b/package.json
@@ -210,6 +210,7 @@
     "Eldar Jafarov <djkojb@gmail.com>",
     "Eric Baer <me@ericbaer.com>",
     "Esteban Marin <estebanmarin@gmx.ch>",
+    "Evgeniy Chekan <hom3chuk@gmail.com>",
     "Fabian Beuke <mail@beuke.org>",
     "Filipe Silva <filipematossilva@gmail.com>",
     "Franck Garcia <garcia.franck@gmail.com>",
@@ -492,7 +493,7 @@
   "engines": {
     "node": ">= 10"
   },
-  "version": "6.3.5",
+  "version": "6.3.6",
   "license": "MIT",
   "husky": {
     "hooks": {