diff --git a/doc/mruby3.1.md b/doc/mruby3.1.md
index 61c11803c..158b8ea7e 100644
--- a/doc/mruby3.1.md
+++ b/doc/mruby3.1.md
@@ -218,3 +218,38 @@ For better and faster hash values.
 - Fix keyword parameters not passing through super [#5660](https://github.com/mruby/mruby/issues/5660)
 - Fix infinite loop from unclosed here-doc [#5676](https://github.com/mruby/mruby/issues/5676)
 - Fix negative integer division bug [#5678](https://github.com/mruby/mruby/issues/5678)
+
+# CVEs
+
+## Fixed CVEs
+
+Following CVEs are fixed in this release.
+
+- [CVE-2021-4110](https://nvd.nist.gov/vuln/detail/CVE-2021-4110)
+- [CVE-2021-4188](https://nvd.nist.gov/vuln/detail/CVE-2021-4188)
+- [CVE-2022-0080](https://nvd.nist.gov/vuln/detail/CVE-2022-0080)
+- [CVE-2022-0240](https://nvd.nist.gov/vuln/detail/CVE-2022-0240)
+- [CVE-2022-0326](https://nvd.nist.gov/vuln/detail/CVE-2022-0326)
+- [CVE-2022-0481](https://nvd.nist.gov/vuln/detail/CVE-2022-0481)
+- [CVE-2022-0631](https://nvd.nist.gov/vuln/detail/CVE-2022-0631)
+- [CVE-2022-0632](https://nvd.nist.gov/vuln/detail/CVE-2022-0632)
+- [CVE-2022-0890](https://nvd.nist.gov/vuln/detail/CVE-2022-0890)
+- [CVE-2022-1071](https://nvd.nist.gov/vuln/detail/CVE-2022-1071)
+- [CVE-2022-1106](https://nvd.nist.gov/vuln/detail/CVE-2022-1106)
+- [CVE-2022-1201](https://nvd.nist.gov/vuln/detail/CVE-2022-1201)
+- [CVE-2022-1427](https://nvd.nist.gov/vuln/detail/CVE-2022-1427)
+
+## Unaffected CVEs
+
+Following CVEs do not cause problems in this release. They are fixed in the later release.
+
+- [CVE-2022-0481](https://nvd.nist.gov/vuln/detail/CVE-2022-0481)
+- [CVE-2022-0525](https://nvd.nist.gov/vuln/detail/CVE-2022-0525)
+- [CVE-2022-0570](https://nvd.nist.gov/vuln/detail/CVE-2022-0570)
+- [CVE-2022-0614](https://nvd.nist.gov/vuln/detail/CVE-2022-0614)
+- [CVE-2022-0623](https://nvd.nist.gov/vuln/detail/CVE-2022-0623)
+- [CVE-2022-0630](https://nvd.nist.gov/vuln/detail/CVE-2022-0630)
+- [CVE-2022-0717](https://nvd.nist.gov/vuln/detail/CVE-2022-0817)
+- [CVE-2022-1212](https://nvd.nist.gov/vuln/detail/CVE-2022-1212)
+- [CVE-2022-1276](https://nvd.nist.gov/vuln/detail/CVE-2022-1276)
+- [CVE-2022-1286](https://nvd.nist.gov/vuln/detail/CVE-2022-1286)