diff --git a/CHANGES b/CHANGES
index 9896bab8b0ac69d2ea777e9083160d52dea191a8..47e2b0d94a95de45c04778cc039e38edf251c4da 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,6 +7,7 @@
  * Add detection of request.env as user input
  * Descriptions of checks in -k output
  * Improved processing of named scopes
+ * Check for mass assignment in ActiveRecord::Associations::AssociationCollection#build
  * Better variable substitution
  * Table output option for rescan reports