diff --git a/HISTORY.md b/HISTORY.md
index bda40a40..0d675b17 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,7 +1,7 @@
-unreleased
+2.2.1 / 2025-11-24
 =========================
 
-* refactor: move common request validation to read function
+* Security fix for [GHSA-wqch-xfxh-vrr4](https://github.com/expressjs/body-parser/security/advisories/GHSA-wqch-xfxh-vrr4)
 * deps: 
   * type-is@^2.0.1
   * iconv-lite@^0.7.0
diff --git a/package.json b/package.json
index 74b1ae71..715e7d60 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "body-parser",
   "description": "Node.js body parsing middleware",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "contributors": [
     "Douglas Christopher Wilson <doug@somethingdoug.com>",
     "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"