diff --git a/website/content/docs/release-notes/v0_14_0.mdx b/website/content/docs/release-notes/v0_14_0.mdx
index 7407e213d..b95db7ce6 100644
--- a/website/content/docs/release-notes/v0_14_0.mdx
+++ b/website/content/docs/release-notes/v0_14_0.mdx
@@ -304,6 +304,26 @@ description: |-
+
+
+ 0.14.0
+
+ (Fixed in 0.14.6)
+ |
+
+ Go CVE-2023-45288
+ |
+
+ The version of Go that was used in Boundary release 0.14.0 contained security vulnerabilities. The vulnerabilities were fixed in Go version 1.21.9. Boundary was updated to use the new Go version in release 0.14.6, and the issue is resolved.
+
+ Learn more:
+
+ CVE-2023-45288: HTTP/2 CONTINUATION flood in net/http
+
+ Upgrade to the latest version of Boundary
+ |
+
+
diff --git a/website/content/docs/release-notes/v0_15_0.mdx b/website/content/docs/release-notes/v0_15_0.mdx
index 2c0d118c8..ccec71af0 100644
--- a/website/content/docs/release-notes/v0_15_0.mdx
+++ b/website/content/docs/release-notes/v0_15_0.mdx
@@ -270,6 +270,27 @@ description: |-
+
+
+ 0.15.0
+
+ (Fixed in 0.15.4)
+ |
+
+ Go CVE-2023-45288
+ |
+
+ The version of Go that was used in Boundary release 0.15.0 contained security vulnerabilities. The vulnerabilities were fixed in Go version 1.21.9. Boundary was updated to use the new Go version in release 0.15.4, and the issue is resolved.
+
+ Learn more:
+
+ CVE-2023-45288: HTTP/2 CONTINUATION flood in net/http
+
+ Upgrade to the latest version of Boundary
+ |
+
+
+