diff --git a/javascript/CHANGELOG.md b/javascript/CHANGELOG.md
index ad50e27..fd50459 100644
--- a/javascript/CHANGELOG.md
+++ b/javascript/CHANGELOG.md
@@ -2,6 +2,9 @@
 
 All notable changes to @cm-email-gateway/email-webhook-verification will be documented in this file.
 
+## [1.0.2] - 2026-04-01
+- vulnerabilities fix
+
 ## [1.0.1] - 2026-03-09
 
 ### Fixed
diff --git a/javascript/package-lock.json b/javascript/package-lock.json
index 87e95ed..6982252 100644
--- a/javascript/package-lock.json
+++ b/javascript/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "@cm-email-gateway/email-webhook-verification",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@cm-email-gateway/email-webhook-verification",
-      "version": "1.0.1",
+      "version": "1.0.2",
       "license": "MIT",
       "devDependencies": {
         "@types/jest": "^29.5.12",
diff --git a/javascript/package.json b/javascript/package.json
index 4ac9829..5b31353 100644
--- a/javascript/package.json
+++ b/javascript/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@cm-email-gateway/email-webhook-verification",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "SDK for verifying CM Email webhook signatures",
   "main": "dist/cjs/index.js",
   "module": "dist/esm/index.js",