diff --git a/CHANGELOG.md b/CHANGELOG.md
index a8bc9b5..73e9c38 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -15,6 +15,24 @@ Format: [Semantic Versioning](https://semver.org/) — `MAJOR.MINOR.PATCH`
 
 ---
 
+## [0.1.4] — 2026-06-22
+
+### Security
+- **Critical**: Updated undici from 7.27.2 to 7.28.0 — **7 security vulnerabilities resolved**
+  - **3× HIGH**: WebSocket DoS (CVE-2026-12151), TLS bypass in SOCKS5 (CVE-2026-9697), Cross-origin routing (CVE-2026-6734)
+  - **2× MEDIUM**: Cache bypass (CVE-2026-9678), HTTP header injection (CVE-2026-9679)
+  - **2× LOW**: SameSite downgrade (CVE-2026-11525), HTTP response poisoning (CVE-2026-6733)
+  - Transitive dependency in @electron-forge
+  - Fixes WebSocket fragment exhaustion, SOCKS5 proxy pool reuse, TLS certificate validation
+
+### Quality
+- All tests passing: 47 passed, 1 skipped
+- Electron build: verified with undici 7.28.0
+- Frontend build: confirmed compatible
+- No regressions
+
+---
+
 ## [0.1.3] — 2026-06-22
 
 ### Fixed
diff --git a/electron/package-lock.json b/electron/package-lock.json
index 1ff09ac..e490c81 100644
--- a/electron/package-lock.json
+++ b/electron/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "metalens",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "metalens",
-      "version": "0.1.2",
+      "version": "0.1.4",
       "license": "MIT",
       "devDependencies": {
         "@electron-forge/cli": "^7.6.0",
@@ -6413,9 +6413,9 @@
       }
     },
     "node_modules/undici": {
-      "version": "7.27.2",
-      "resolved": "https://registry.npmjs.org/undici/-/undici-7.27.2.tgz",
-      "integrity": "sha512-uZsKNuzQxDMUY6M3pIMvy5tvlGmtq8XJ2oLAkfRKGNu+1VQAIvLy2xIVG5ATZl5wDXl/tddByAWCizRbOme+TA==",
+      "version": "7.28.0",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.28.0.tgz",
+      "integrity": "sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==",
       "dev": true,
       "license": "MIT",
       "optional": true,
diff --git a/electron/package.json b/electron/package.json
index 5ef50c8..f29277f 100644
--- a/electron/package.json
+++ b/electron/package.json
@@ -1,6 +1,6 @@
 {
   "name": "metalens",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "description": "Universal File Metadata Manager",
   "author": "Graziano Mariella",
   "license": "MIT",
diff --git a/frontend/package.json b/frontend/package.json
index 88db118..42b039f 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -1,6 +1,6 @@
 {
   "name": "metalens-frontend",
-  "version": "0.1.3",
+  "version": "0.1.4",
   "private": true,
   "type": "module",
   "scripts": {
diff --git a/python/config.py b/python/config.py
index 0284a97..00c9381 100644
--- a/python/config.py
+++ b/python/config.py
@@ -1,7 +1,7 @@
 from dataclasses import dataclass
 
 
-VERSION = "0.1.3"
+VERSION = "0.1.4"
 APP_NAME = "MetaLens"
 SIDECAR_HOST = "127.0.0.1"