diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2daaa33..7b33514 100755
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,6 @@
+
+- Fixed: avoid security issue related to ``reduce-css-calc@< 1.2.4``.
+
 # 5.3.0 - 2016-07-11
 
 - Added: support for selector transformation via `selectors` option.
diff --git a/package.json b/package.json
index 3c63968..8bbf30f 100644
--- a/package.json
+++ b/package.json
@@ -17,7 +17,7 @@
   ],
   "dependencies": {
     "postcss-message-helpers": "^2.0.0",
-    "reduce-css-calc": "^1.2.0",
+    "reduce-css-calc": "^1.2.6",
     "postcss": "^5.0.2"
   },
   "devDependencies": {