diff --git a/HISTORY.md b/HISTORY.md
index bce4da8..1b33f5d 100644
--- a/HISTORY.md
+++ b/HISTORY.md
@@ -1,3 +1,9 @@
+4.3.1
+=====
+
+- Fix [CVE-2026-87123](https://www.cve.org/CVERecord?id=CVE-2026-87123) ([GHSA-3c55-w9jx-p5jr](https://github.com/pillarjs/hbs/security/advisories/GHSA-3c55-w9jx-p5jr))
+- fix treat async substitution throws as render errors
+
 4.3.0
 =====
 
diff --git a/package.json b/package.json
index 22a6ee0..21c65c9 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "hbs",
   "description": "Express.js template engine plugin for Handlebars",
-  "version": "4.3.0",
+  "version": "4.3.1",
   "author": "Don Park <donpark@docuverse.com> (http://blog.docuverse.com)",
   "contributors": [
     "Roman Shtylman <shtylman@gmail.com>"