diff --git a/tower-http/CHANGELOG.md b/tower-http/CHANGELOG.md
index e31e64c6..f0cc6027 100644
--- a/tower-http/CHANGELOG.md
+++ b/tower-http/CHANGELOG.md
@@ -9,6 +9,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - None.
 
+# 0.1.3 (January 22, 2022)
+
+- `ServeDir` and `ServeFile`: Fix potential directory traversal attack due to
+  improper path validation on Windows ([#204])
+
+[#204]: https://github.com/tower-rs/tower-http/pull/204
+
 # 0.1.2 (November 13, 2021)
 
 - New middleware: Add `Cors` for setting [CORS] headers ([#112])
diff --git a/tower-http/Cargo.toml b/tower-http/Cargo.toml
index 25527f93..3122ec63 100644
--- a/tower-http/Cargo.toml
+++ b/tower-http/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "tower-http"
 description = "Tower middleware and utilities for HTTP clients and servers"
-version = "0.1.2"
+version = "0.1.3"
 authors = ["Tower Maintainers <team@tower-rs.com>"]
 edition = "2018"
 license = "MIT"