diff --git a/docs/about/all/releases/security-release-notes-202412.0.md b/docs/about/all/releases/security-release-notes-202412.0.md
index 7fd48b056c..2fa2df8dde 100644
--- a/docs/about/all/releases/security-release-notes-202412.0.md
+++ b/docs/about/all/releases/security-release-notes-202412.0.md
@@ -158,3 +158,11 @@ Symfony/security-http third-party dependency was vulnerable to authentication by
 ```bash
 composer update symfony/security-http
 ```
+
+## Vulnerability in Summernote third-party dependency
+
+High-privileged users could inject and execute arbitrary Twig template code, leading to Remote Code Execution (RCE). This vulnerability allowed unauthorized access to sensitive server data, including application secrets, credentials, and configurations.
+
+### Fix the vulnerability
+
+1. Update the `spryker/twig` package to version 3.27.0 or higher.
\ No newline at end of file