diff --git a/CHANGELOG.md b/CHANGELOG.md
index c48f9373e..2a42b6221 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Change Log
 
+## <a name="v0-22-1" href="#v0-22-1">v0.22.1</a> [(2018-04-09)](https://github.com/nodegit/nodegit/releases/tag/v0.22.1)
+
+[Full Changelog](https://github.com/nodegit/nodegit/compare/v0.22.0...v0.22.1)
+
+#### Summary of changes
+Bumped libgit2 to 0.27.1 to address security flaw with submodule name validation (CVE-2018-11235, reported by Etienne Stalmans).
+Details can be found here https://github.com/libgit2/libgit2/releases/tag/v0.27.1
+
+
 ## <a name="v0-22-0" href="#v0-22-0">v0.22.0</a> [(2018-04-09)](https://github.com/nodegit/nodegit/releases/tag/v0.22.0)
 
 [Full Changelog](https://github.com/nodegit/nodegit/compare/v0.21.2...v0.22.0)
diff --git a/appveyor.yml b/appveyor.yml
index acbc2bcc9..4250dff4a 100644
--- a/appveyor.yml
+++ b/appveyor.yml
@@ -35,6 +35,7 @@ matrix:
 
 # Get the latest stable version of Node 0.STABLE.latest
 install:
+  - git submodule update --init --recursive
   - ps: Install-Product node $env:nodejs_version $env:platform
   - ps: Start-Process c:\projects\nodegit\vendor\pageant.exe c:\projects\nodegit\vendor\private.ppk
   - npm install -g npm
diff --git a/examples/walk-history.js b/examples/walk-history.js
index 2e41ce2da..7bdab9fb9 100644
--- a/examples/walk-history.js
+++ b/examples/walk-history.js
@@ -10,7 +10,7 @@ nodegit.Repository.open(path.resolve(__dirname, "../.git"))
   })
   .then(function(firstCommitOnMaster){
     // History returns an event.
-    var history = firstCommitOnMaster.history(nodegit.Revwalk.SORT.Time);
+    var history = firstCommitOnMaster.history(nodegit.Revwalk.SORT.TIME);
 
     // History emits "commit" event for each commit in the branch's history
     history.on("commit", function(commit) {
diff --git a/package-lock.json b/package-lock.json
index b8c4206fb..1e8cdc10a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,6 +1,6 @@
 {
   "name": "nodegit",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "lockfileVersion": 1,
   "requires": true,
   "dependencies": {
diff --git a/package.json b/package.json
index 9aa835a7b..4b8cdbbe6 100644
--- a/package.json
+++ b/package.json
@@ -1,7 +1,7 @@
 {
   "name": "nodegit",
   "description": "Node.js libgit2 asynchronous native bindings",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "homepage": "http://nodegit.org",
   "keywords": [
     "libgit2",
diff --git a/vendor/libgit2 b/vendor/libgit2
index 0a00bd9db..07674fbae 160000
--- a/vendor/libgit2
+++ b/vendor/libgit2
@@ -1 +1 @@
-Subproject commit 0a00bd9dbd4bc12dc9fe43d80bcae5a31d06d66f
+Subproject commit 07674fbae6add2ce24e0b4aa6381b9d6272b98e3