diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index 687e7ca..9c0ef12 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -35,3 +35,8 @@
 ### Added
 - proxy subscription clients through gateway
 
+## Pending -- 2026-07-18
+
+### Fixed
+- prevent subscription header spoofing
+