diff --git a/CHANGELOG.md b/CHANGELOG.md
index 275d1516f..eceb56653 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -44,6 +44,8 @@ BUG FIXES:
    [GH-3625] [GH-3656]
  * core: Fix potential panic that could occur using plugins when a node
    transitioned from active to standby [GH-3638]
+ * core: Replace recursive token revocation logic with depth-first logic, which
+   can avoid stack overflows in extreme cases [GH-2348]
  * core/pkcs11 (enterprise): Fix panic when PKCS#11 library is not readable
  * database/mysql: Allow the creation statement to use commands that are not yet
    supported by the prepare statement protocol [GH-3619]