diff --git a/CHANGELOG.md b/CHANGELOG.md
index 1f8c4fa5a..05068e58a 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,12 @@
+## [6.3.14](https://github.com/karma-runner/karma/compare/v6.3.13...v6.3.14) (2022-02-05)
+
+
+### Bug Fixes
+
+* remove string template from client code ([91d5acd](https://github.com/karma-runner/karma/commit/91d5acda6325caf91685da465d688527bd412b47))
+* warn when `singleRun` and `autoWatch` are `false` ([69cfc76](https://github.com/karma-runner/karma/commit/69cfc763c8f83e8e7e64d34e17829d0d3dcc0449))
+* **security:** remove XSS vulnerability in `returnUrl` query param ([839578c](https://github.com/karma-runner/karma/commit/839578c45a8ac42fbc1d72105f97eab77dd3eb8a))
+
 ## [6.3.13](https://github.com/karma-runner/karma/compare/v6.3.12...v6.3.13) (2022-01-31)
 
 
diff --git a/package-lock.json b/package-lock.json
index f385637b6..d1c4a2e7d 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "karma",
-  "version": "6.3.13",
+  "version": "6.3.14",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index dd08952f7..718ee8603 100644
--- a/package.json
+++ b/package.json
@@ -30,8 +30,8 @@
     "greenkeeperio-bot <support@greenkeeper.io>",
     "Karma Bot <karmarunnerbot@gmail.com>",
     "Maksim Ryzhikov <rv.maksim@gmail.com>",
-    "ukasz Usarz <lukasz.usarz@gmail.com>",
     "semantic-release-bot <semantic-release-bot@martynus.net>",
+    "ukasz Usarz <lukasz.usarz@gmail.com>",
     "Christian Budde Christensen <budde377@gmail.com>",
     "Wesley Cho <wesley.cho@gmail.com>",
     "taichi <ryushi@gmail.com>",
@@ -41,9 +41,9 @@
     "Michał Gołębiowski-Owczarek <m.goleb@gmail.com>",
     "Todd Wolfson <todd@twolfson.com>",
     "Mark Trostler <mark@zzo.com>",
+    "Jonathan Ginsburg <jon@than.ml>",
     "Ciro Nunes <ciroanunes@gmail.com>",
     "Christian Budde Christensen <christi@n-bud.de>",
-    "Jonathan Ginsburg <jon@than.ml>",
     "Pawel Kozlowski <pkozlowski.opensource@gmail.com>",
     "Robo <hop2deep@gmail.com>",
     "Shyam Seshadri <shyamseshadri@gmail.com>",
@@ -499,7 +499,7 @@
   "engines": {
     "node": ">= 10"
   },
-  "version": "6.3.13",
+  "version": "6.3.14",
   "license": "MIT",
   "scripts": {
     "lint": "eslint . --ext js --ignore-pattern *.tpl.js",