Update CHANGELOG for release 5.3.2

This release addresses security issues related to path traversal by validating that paths stay within their expected base directory.

Author: bact

CHANGELOG.md

@@ -15,7 +15,16 @@ and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 - Full release notes: <https://github.com/PyThaiNLP/pythainlp/releases>
-- Commit history: <https://github.com/PyThaiNLP/pythainlp/compare/v5.3.0...v5.3.1>
+- Commit history: <https://github.com/PyThaiNLP/pythainlp/compare/v5.3.1...v5.3.2>
+
+## [5.3.2] - 2026-03-20
+
+This release focuses on security issues related to path traversal.
+
+### Security
+
+- Prevent path traversal: validate that paths stay within
+  their expected base directory (#1342)
 
 ## [5.3.1] - 2026-03-14
 
@@ -26,9 +35,6 @@ This release focuses on security issues related to corpus file loading.
 - thai2fit: Use JSON model instead of pickle (#1325)
 - Defensive corpus loading: validate fields before processing (#1327)
 - w2p: Use npz model instead of pickle (#1328)
-- Fix path traversal vulnerabilities: validate that paths constructed from
-  external input stay within their expected base directory;
-  `get_full_data_path()` now raises `ValueError` on traversal attempts
 
 ## [5.3.0] - 2026-03-10
 
@@ -215,6 +221,7 @@ The minimum requirement is now Python 3.9.
 
 - See <https://github.com/PyThaiNLP/pythainlp/releases/tag/v5.0.0>
 
+[5.3.2]: https://github.com/PyThaiNLP/pythainlp/compare/v5.3.1...v5.3.2
 [5.3.1]: https://github.com/PyThaiNLP/pythainlp/compare/v5.3.0...v5.3.1
 [5.3.0]: https://github.com/PyThaiNLP/pythainlp/compare/v5.2.0...v5.3.0
 [5.2.0]: https://github.com/PyThaiNLP/pythainlp/compare/v5.1.2...v5.2.0