diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5f68af3a..5d41cb4d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,9 @@
 ## Release Notes
 
+### 0.9.1
+
+This is a minor patch release that updates the Jackson dependency to 2.9.6 to address Jackson CVE-2017-17485.
+
 ### 0.9.0
 
 This is a minor release that includes changes to dependencies and plugins to allow for building jjwt with Java 9.
diff --git a/README.md b/README.md
index bbde8055..e40ae1ae 100644
--- a/README.md
+++ b/README.md
@@ -68,7 +68,7 @@ Maven:
 <dependency>
     <groupId>io.jsonwebtoken</groupId>
     <artifactId>jjwt</artifactId>
-    <version>0.9.0</version>
+    <version>0.9.1</version>
 </dependency>
 ```
 
@@ -76,7 +76,7 @@ Gradle:
 
 ```groovy
 dependencies {
-    compile 'io.jsonwebtoken:jjwt:0.9.0'
+    compile 'io.jsonwebtoken:jjwt:0.9.1'
 }
 ```