diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index b96a80a..784f5d5 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -3,6 +3,13 @@ Changelog
 =========
 
 
+4.2.6.0 (2023-10-05)
+====================
+
+* Upgrade Django to 4.2.6 (fixes CVE-2023-43665)
+  see https://www.djangoproject.com/weblog/2023/oct/04/security-releases/ for details
+
+
 4.2.5.0 (2023-09-04)
 ====================
 
diff --git a/aldryn_django/__init__.py b/aldryn_django/__init__.py
index daaa04c..da932d7 100644
--- a/aldryn_django/__init__.py
+++ b/aldryn_django/__init__.py
@@ -1 +1 @@
-__version__ = '4.2.5.0'
+__version__ = '4.2.6.0'
diff --git a/setup.py b/setup.py
index a451824..d0e8b84 100644
--- a/setup.py
+++ b/setup.py
@@ -6,7 +6,7 @@
 
 REQUIREMENTS = [
     'aldryn-addons',
-    'Django==4.2.5',
+    'Django==4.2.6',
 
     # setup utils
     'dj-database-url',