diff --git a/changelog.md b/changelog.md
index 2c1307b..fe9f42e 100644
--- a/changelog.md
+++ b/changelog.md
@@ -44,4 +44,5 @@ irflow-sdk-python changelog
 * v1.6.0 Added the Assign User to Alert Endpoint
     * Python2 support will be deprecated at the end of 2019
     * Bump certifi to 2019.6.16
-    * Bump urllib3>=1.24.3 (CVE-2019-9740)
\ No newline at end of file
+    * Bump urllib3>=1.24.3 (CVE-2019-9740)
+* v1.6.1 Bump bleach version to patch moderate severity XSS issues: https://github.com/Syncurity/irflow-sdk-python/pull/84
\ No newline at end of file
diff --git a/irflow_client/__version__.py b/irflow_client/__version__.py
index fffcca6..40c4721 100644
--- a/irflow_client/__version__.py
+++ b/irflow_client/__version__.py
@@ -3,7 +3,7 @@
 __title__ = 'irflow_client'
 __description__ = 'A python client for Syncurity IR-Flow'
 __url__ = 'https://syncurity.net'
-__version__ = '1.6.0'
+__version__ = '1.6.1'
 __build__ = ''
 __author__ = 'Syncurity'
 __author_email__ = 'support@syncurity.net'
diff --git a/requirements-dev.txt b/requirements-dev.txt
index f0dac45..a5535bc 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -2,7 +2,7 @@
 # -i https://pypi.org/simple
 atomicwrites==1.2.1
 attrs==18.2.0
-bleach==3.0.2
+bleach==3.1.1
 certifi==2018.10.15
 cffi==1.11.5
 chardet==3.0.4