diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6d9fa0799..0b8581167 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [6.3.16](https://github.com/karma-runner/karma/compare/v6.3.15...v6.3.16) (2022-02-10)
+
+
+### Bug Fixes
+
+* **security:** mitigate the "Open Redirect Vulnerability" ([ff7edbb](https://github.com/karma-runner/karma/commit/ff7edbb2ffbcdd69761bece86b7dc1ef0740508d))
+
 ## [6.3.15](https://github.com/karma-runner/karma/compare/v6.3.14...v6.3.15) (2022-02-05)
 
 
diff --git a/package-lock.json b/package-lock.json
index 556087493..7d5fa9af4 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "karma",
-  "version": "6.3.15",
+  "version": "6.3.16",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 6674f5ea7..9379c9403 100644
--- a/package.json
+++ b/package.json
@@ -38,9 +38,9 @@
     "Liam Newman <bitwiseman@gmail.com>",
     "lukasz <lukasz.usarz@gmail.com>",
     "Anton <anton.redfox@gmail.com>",
+    "Jonathan Ginsburg <jon@than.ml>",
     "Michał Gołębiowski-Owczarek <m.goleb@gmail.com>",
     "Todd Wolfson <todd@twolfson.com>",
-    "Jonathan Ginsburg <jon@than.ml>",
     "Mark Trostler <mark@zzo.com>",
     "Ciro Nunes <ciroanunes@gmail.com>",
     "Christian Budde Christensen <christi@n-bud.de>",
@@ -499,7 +499,7 @@
   "engines": {
     "node": ">= 10"
   },
-  "version": "6.3.15",
+  "version": "6.3.16",
   "license": "MIT",
   "scripts": {
     "lint": "eslint . --ext js --ignore-pattern *.tpl.js",