diff --git a/CHANGELOG.md b/CHANGELOG.md
index ace25bc10f3bef5d3860c4318296fa9dec428a16..b3a18c53967960c6895e606fcd31a87536fa3a19 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+Changes in [1.11.103](https://github.com/element-hq/element-web/releases/tag/v1.11.103) (2025-06-10)
+====================================================================================================
+## 🐛 Bug Fixes
+
++ Check the sender of an event matches owner of session, preventing sender spoofing by homeserver owners.
+[13c1d20](https://github.com/matrix-org/matrix-rust-sdk/commit/13c1d2048286bbabf5e7bc6b015aafee98f04d55) (High, [GHSA-x958-rvg6-956w](https://github.com/matrix-org/matrix-rust-sdk/security/advisories/GHSA-x958-rvg6-956w)).
+
 Changes in [1.11.102](https://github.com/element-hq/element-web/releases/tag/v1.11.102) (2025-06-03)
 ====================================================================================================
 ## ✨ Features
diff --git a/package.json b/package.json
index c3ac726d21c9e3dcd3c9530428e7c698d629e26b..ccf9bcb3f9f815af7ca4dae9df8135d9bfd6d7c5 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
     "name": "element-web",
-    "version": "1.11.102",
+    "version": "1.11.103",
     "description": "Element: the future of secure communication",
     "author": "New Vector Ltd.",
     "repository": {