diff --git a/CHANGELOG.md b/CHANGELOG.md
index b6fac7ad37a..4dd9fb4ce21 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -30,7 +30,8 @@ release.
-14.10.1
+14.11.0
+14.10.1
14.10.0
14.9.0
14.8.0
diff --git a/doc/api/http.md b/doc/api/http.md
index 8945ba3fda5..b4348f4dfdd 100644
--- a/doc/api/http.md
+++ b/doc/api/http.md
@@ -1261,7 +1261,7 @@ Limits maximum incoming headers count. If set to 0, no limit will be applied.
### `server.requestTimeout`
* {number} **Default:** `0`
diff --git a/doc/api/https.md b/doc/api/https.md
index 8dbe4d2f224..40dcf4b1d7f 100644
--- a/doc/api/https.md
+++ b/doc/api/https.md
@@ -115,7 +115,7 @@ See [`http.Server#maxHeadersCount`][].
### `server.requestTimeout`
* {number} **Default:** `0`
diff --git a/doc/changelogs/CHANGELOG_V14.md b/doc/changelogs/CHANGELOG_V14.md
index a5dea842159..86bda5aa6ef 100644
--- a/doc/changelogs/CHANGELOG_V14.md
+++ b/doc/changelogs/CHANGELOG_V14.md
@@ -10,6 +10,7 @@
|
+14.11.0
14.10.1
14.10.0
14.9.0
@@ -42,6 +43,23 @@
* [io.js](CHANGELOG_IOJS.md)
* [Archive](CHANGELOG_ARCHIVE.md)
+
+## 2020-09-15, Version 14.11.0 (Current), @richardlau
+
+### Notable Changes
+
+This is a security release.
+
+Vulnerabilities fixed:
+
+* **CVE-2020-8251**: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests (Critical).
+* **CVE-2020-8201**: HTTP Request Smuggling due to CR-to-Hyphen conversion (High).
+
+### Commits
+
+* [[`dd828376a0`](https://github.com/nodejs/node/commit/dd828376a0)] - **deps**: update llhttp to 2.1.2 (Fedor Indutny) [nodejs-private/node-private#215](https://github.com/nodejs-private/node-private/pull/215)
+* [[`753f3b247a`](https://github.com/nodejs/node/commit/753f3b247a)] - **http**: add requestTimeout (Matteo Collina, Paolo Insogna, Robert Nagy) [nodejs-private/node-private#208](https://github.com/nodejs-private/node-private/pull/208)
+
## 2020-09-10, Version 14.10.1 (Current), @richardlau
|