diff --git a/CHANGELOG.md b/CHANGELOG.md
index dff6d69e4..6e5e7d130 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## [6.3.6](https://github.com/karma-runner/karma/compare/v6.3.5...v6.3.6) (2021-10-25)
+
+
+### Bug Fixes
+
+* bump vulnerable ua-parser-js version ([6f2b2ec](https://github.com/karma-runner/karma/commit/6f2b2ec6ed0218980eabf2cbf44e0c8f16fee661)), closes [#3713](https://github.com/karma-runner/karma/issues/3713)
+
 ## [6.3.5](https://github.com/karma-runner/karma/compare/v6.3.4...v6.3.5) (2021-10-20)
 
 
diff --git a/package-lock.json b/package-lock.json
index 9698c4109..d3c7357d2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "karma",
-  "version": "6.3.5",
+  "version": "6.3.6",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
@@ -6473,7 +6473,7 @@
         "socket.io": "^4.2.0",
         "source-map": "^0.6.1",
         "tmp": "^0.2.1",
-        "ua-parser-js": "^0.7.28",
+        "ua-parser-js": "^0.7.30",
         "yargs": "^16.1.1"
       }
     },
@@ -13216,9 +13216,9 @@
       "dev": true
     },
     "ua-parser-js": {
-      "version": "0.7.28",
-      "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.28.tgz",
-      "integrity": "sha512-6Gurc1n//gjp9eQNXjD9O3M/sMwVtN5S8Lv9bvOYBfKfDNiIIhqiyi01vMBO45u4zkDE420w/e0se7Vs+sIg+g=="
+      "version": "0.7.30",
+      "resolved": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.30.tgz",
+      "integrity": "sha512-uXEtSresNUlXQ1QL4/3dQORcGv7+J2ookOG2ybA/ga9+HYEXueT2o+8dUJQkpedsyTyCJ6jCCirRcKtdtx1kbg=="
     },
     "uglify-js": {
       "version": "3.6.0",
diff --git a/package.json b/package.json
index 4a793b790..dae4f3f83 100644
--- a/package.json
+++ b/package.json
@@ -210,6 +210,7 @@
     "Eldar Jafarov <djkojb@gmail.com>",
     "Eric Baer <me@ericbaer.com>",
     "Esteban Marin <estebanmarin@gmx.ch>",
+    "Evgeniy Chekan <hom3chuk@gmail.com>",
     "Fabian Beuke <mail@beuke.org>",
     "Filipe Silva <filipematossilva@gmail.com>",
     "Franck Garcia <garcia.franck@gmail.com>",
@@ -439,7 +440,7 @@
     "socket.io": "^4.2.0",
     "source-map": "^0.6.1",
     "tmp": "^0.2.1",
-    "ua-parser-js": "^0.7.28",
+    "ua-parser-js": "^0.7.30",
     "yargs": "^16.1.1"
   },
   "devDependencies": {
@@ -492,7 +493,7 @@
   "engines": {
     "node": ">= 10"
   },
-  "version": "6.3.5",
+  "version": "6.3.6",
   "license": "MIT",
   "husky": {
     "hooks": {