diff --git a/actions/ql/lib/change-notes/2025-11-28-fix-code-injection-alert-filtering.md b/actions/ql/lib/change-notes/2025-11-28-fix-code-injection-alert-filtering.md
new file mode 100644
index 00000000000..b80ef77c2bc
--- /dev/null
+++ b/actions/ql/lib/change-notes/2025-11-28-fix-code-injection-alert-filtering.md
@@ -0,0 +1,4 @@
+---
+category: majorAnalysis
+---
+* The query `actions/code-injection/medium` has been updated to include results which were incorrectly excluded while filtering out results that are reported by `actions/code-injection/critical`.