diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5486441..23d48dd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -19,6 +19,7 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 - Bump actions/cache from 3.2.2 to 3.2.5 (#284, #294, #301).
 - Bump actions/setup-java from 3.9.0 to 3.10.0 (#299).
 - Bump github/codeql-action from 2.1.37 to 2.2.4 (#286, #290, #291, #295, #300, #302)
+- Bump cyclonedx-maven-plugin from 2.7.4 to 2.7.5 (#304)
 - Bump strata-basics from 2.12.17 to 2.12.20 (#285, #288, #289)
 - Set up Qodana analysis (#296)
 
diff --git a/pom.xml b/pom.xml
index 8cfe671..748d789 100644
--- a/pom.xml
+++ b/pom.xml
@@ -24,7 +24,7 @@
     <strata.version>2.12.20</strata.version>
 
     <!-- 2.17+ requires java 11+ -->
-    <cyclonedx-maven-plugin.version>2.7.4</cyclonedx-maven-plugin.version>
+    <cyclonedx-maven-plugin.version>2.7.5</cyclonedx-maven-plugin.version>
     <formatter-maven-plugin.version>2.16.0</formatter-maven-plugin.version>
 
     <!-- https://maven.apache.org/guides/mini/guide-reproducible-builds.html -->