Fix #2197
diff --git a/release-notes/VERSION-2.x b/release-notes/VERSION-2.x
index e2be655..529690f 100644
--- a/release-notes/VERSION-2.x
+++ b/release-notes/VERSION-2.x
@@ -18,6 +18,9 @@
 #2186: Block more classes from polymorphic deserialization (CVE-2018-19360,
   CVE-2018-19361, CVE-2018-19362)
  (reported by Guixiong Wu)
+#2197: Illegal reflective access operation warning when using `java.lang.Void`
+  as value type
+ (reported by René K)
 
 2.9.7 (19-Sep-2018)