update changelog

Author: overheadhunter

CHANGELOG.md

@@ -5,6 +5,14 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.5.0-beta4](https://github.com/cryptomator/hub/compare/1.5.0-beta3...1.5.0-beta4)
+
+### Security
+
+- Fixed [Emergency Access Authorization Bypass](https://github.com/cryptomator/hub/security/advisories/GHSA-99p9-vhhj-2x98)
+- Fixed [Unauthorized Read/Delete of Recovery Process State](https://github.com/cryptomator/hub/security/advisories/GHSA-p94x-9592-5r73)
+- Fixed [Endpoints Accepts Invalid / non-JWE Key Material](https://github.com/cryptomator/hub/security/advisories/GHSA-hq3g-4c59-cgg7)
+
 ## [1.5.0-beta3](https://github.com/cryptomator/hub/compare/1.5.0-beta2...1.5.0-beta3)
 
 ### Fixed