diff --git a/content/security.md b/content/security.md
index 45c1b93..48432af 100755
--- a/content/security.md
+++ b/content/security.md
@@ -95,6 +95,7 @@ We firmly believe that, even though unfortunately it is often not regarded as co
 - [CVE-2023-28606](https://cvepremium.circl.lu/cve/CVE-2023-28606) < MISP 2.4.169 - js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips. 
 - [CVE-2023-28607](https://cvepremium.circl.lu/cve/CVE-2023-28607) < MISP 2.4.169 - js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip. 
 - [CVE-2023-28884](https://cvepremium.circl.lu/cve/CVE-2023-28884) < MISP 2.4.170 - app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index. 
+- CVE-2023-37306 - error-based padding oracle
 
 ## PGP Key