diff --git a/CHANGES b/CHANGES
index 6cba8423b..a24abc51b 100644
--- a/CHANGES
+++ b/CHANGES
@@ -3102,3 +3102,7 @@
 
 [9.0.15]
 * sshfs: Use unique temporary ssh key file for each ssh remote operation
+
+[9.1.0]
+* Update mongodb to 7.0.28 (also fixes mongobleed)
+
diff --git a/src/infra_version.js b/src/infra_version.js
index 6d329e3f2..a0cf91c69 100644
--- a/src/infra_version.js
+++ b/src/infra_version.js
@@ -14,7 +14,7 @@ exports = module.exports = {
         // 'base': 'registry.docker.com/cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c',
         'graphite': 'registry.docker.com/cloudron/graphite:3.5.1@sha256:5383f694245f25a386140268b490a41aa0ba6fb0024d92852546e40c8458681f',
         'mail': 'registry.docker.com/cloudron/mail:3.17.0@sha256:64478f7f71b54fb2fb6ad09bc9bcc8bf6f6e2bd590f9c457e2a8ebdf927b373b',
-        'mongodb': 'registry.docker.com/cloudron/mongodb:6.1.2@sha256:b35ad49ddb87f0bba449ecc438caa2d6e6960d31b3d1b5de1119b045aae1ea94',
+        'mongodb': 'registry.docker.com/cloudron/mongodb:6.2.0@sha256:ca40e66bec000c3b9a0e2f42e9765822c111c7bc65363c504464b2d0ecb1020f',
         'mysql': 'registry.docker.com/cloudron/mysql:3.5.2@sha256:5cf52069a5ffb126afcaf6cdf91dba7e2c719efe48669e46b616979ef825e25b',
         'postgresql': 'registry.docker.com/cloudron/postgresql:6.2.1@sha256:97602454457a9c4800a3d0dd87ff86de36c1057a68f976528162f004a22f652a',
         'redis': 'registry.docker.com/cloudron/redis:3.7.0@sha256:fa0c0e757973fb434e359b142ed41c5b54c89715e5d9ad5a59e1ad54e0034219',