diff --git a/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/5_4_0/2194-suppress-auth-header-in-testpage.yaml b/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/5_4_0/2194-suppress-auth-header-in-testpage.yaml
new file mode 100644
index 00000000000..1e4a5439053
--- /dev/null
+++ b/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/5_4_0/2194-suppress-auth-header-in-testpage.yaml
@@ -0,0 +1,5 @@
+---
+type: security
+issue: 2194
+title: "The Testpage Overlay now suppresses authorization headers from the output headers. Thanks
+  to Tuomo Ala-Vannesluoma for the pull request!"