diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 71e853a3..6db20942 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -5,6 +5,13 @@ Change Log
 This document records all notable changes to djoser.
 This project adheres to `Semantic Versioning <http://semver.org/>`_.
 
+---------------------
+`2.3.0`_ (2024-11-09)
+---------------------
+
+* a potentially breaking change: fix vuln where users were given tokens if the given password was correct, but they haven't passed Django internal AUTHENTICATION_BACKENDS https://github.com/sunscrapers/djoser/issues/795
+
+
 ---------------------
 `2.2.3`_ (2024-06-07)
 ---------------------
@@ -444,3 +451,4 @@ few bugfixes / documentation updates. List of changes:
 .. _2.2.1: https://github.com/sunscrapers/djoser/compare/2.2.0...2.2.1
 .. _2.2.2: https://github.com/sunscrapers/djoser/compare/2.2.1...2.2.2
 .. _2.2.3: https://github.com/sunscrapers/djoser/compare/2.2.2...2.2.3
+.. _2.3.0: https://github.com/sunscrapers/djoser/compare/2.2.3...2.3.0
diff --git a/pyproject.toml b/pyproject.toml
index 809fc2e6..dfb5960f 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "djoser"
-version = "2.2.3"
+version = "2.3.0"
 description = "REST implementation of Django authentication system."
 authors = [
     "Sunscrapers <info@sunscrapers.com>",