diff --git a/CREDITS.md b/CREDITS.md
index 6ac1b0e..d89b0e3 100644
--- a/CREDITS.md
+++ b/CREDITS.md
@@ -68,9 +68,6 @@ Full contribution, see git log.
 * Christian Dresen
    - Dockerfile
 
-* Eric Gu
-  - HTML report XSS fix (escape server-controlled URLs, #3090)
-
 * enxio
    - support for TN3270/telnet STARTTLS
 
@@ -87,6 +84,9 @@ Full contribution, see git log.
   - bugfixes
   - former ARM binary support
 
+* Eric Gu
+  - HTML report XSS fix: escape server-controlled URLs
+
 * Jauder Ho
   - GH Action to build new container images upon push
   - dependabot actions