diff --git a/CHANGELOG.md b/CHANGELOG.md
index 168be0f1..3d3c46ed 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # CHANGELOG
 
+## Version 4.2.1
+
+### Date: 20-Apr-2026
+
+- Security: mark manifest-declared broadcast receivers as non-exported to prevent other apps from sending spoofed broadcasts.
+
 ## Version 4.2.0
 
 ### Date: 02-Mar-2026
diff --git a/contentstack/build.gradle b/contentstack/build.gradle
index c2e1c461..3687fbc6 100755
--- a/contentstack/build.gradle
+++ b/contentstack/build.gradle
@@ -7,7 +7,7 @@ plugins {
 ext {
     PUBLISH_GROUP_ID = 'com.contentstack.sdk'
     PUBLISH_ARTIFACT_ID = 'android'
-    PUBLISH_VERSION = '4.2.0'
+    PUBLISH_VERSION = '4.2.1'
 }
 
 android {
diff --git a/contentstack/src/main/AndroidManifest.xml b/contentstack/src/main/AndroidManifest.xml
index d94c12f5..e72bd55c 100755
--- a/contentstack/src/main/AndroidManifest.xml
+++ b/contentstack/src/main/AndroidManifest.xml
@@ -10,7 +10,7 @@
         <receiver
             android:name="com.contentstack.sdk.ConnectionStatus"
             android:enabled="true"
-            android:exported="true">
+            android:exported="false">
             <intent-filter>
                 <action android:name="android.net.conn.CONNECTIVITY_CHANGE" />
             </intent-filter>
@@ -18,7 +18,7 @@
         <receiver
             android:name="com.contentstack.sdk.ClearCache"
             android:enabled="true"
-            android:exported="true">
+            android:exported="false">
             <intent-filter>
                 <action android:name="StartContentStackClearingCache" />
             </intent-filter>