diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 784f5d5..e9521c3 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -3,6 +3,13 @@ Changelog
 =========
 
 
+4.2.7.0 (2023-11-01)
+====================
+
+* Upgrade Django to 4.2.7 (fixes CVE-2023-46695)
+  see https://www.djangoproject.com/weblog/2023/nov/01/security-releases/ for details
+
+
 4.2.6.0 (2023-10-05)
 ====================
 
diff --git a/aldryn_django/__init__.py b/aldryn_django/__init__.py
index da932d7..0d84ca2 100644
--- a/aldryn_django/__init__.py
+++ b/aldryn_django/__init__.py
@@ -1 +1 @@
-__version__ = '4.2.6.0'
+__version__ = '4.2.7.0'
diff --git a/setup.py b/setup.py
index d0e8b84..279df5b 100644
--- a/setup.py
+++ b/setup.py
@@ -6,7 +6,7 @@
 
 REQUIREMENTS = [
     'aldryn-addons',
-    'Django==4.2.6',
+    'Django==4.2.7',
 
     # setup utils
     'dj-database-url',