diff --git a/doc/security.mdwn b/doc/security.mdwn
index 5c54031a8..299109af2 100644
--- a/doc/security.mdwn
+++ b/doc/security.mdwn
@@ -598,7 +598,7 @@ in version 3.20141016.4.
 
 ## <span id="cve-2017-0356">Authentication bypass via repeated parameters</span>
 
-The ikiwiki maintainers discovered further flaws similar 2016-9646
+The ikiwiki maintainers discovered further flaws similar to CVE-2016-9646
 in the passwordauth plugin's use of CGI::FormBuilder, with a more
 serious impact: