diff --git a/.ci/windows/build.bat b/.ci/windows/build.bat
index 7e952237..70d72283 100644
--- a/.ci/windows/build.bat
+++ b/.ci/windows/build.bat
@@ -4,7 +4,7 @@
 if defined CI_COMMIT_TAG (
 	set VERSION=%CI_COMMIT_TAG%
 ) else (
-	set VERSION=v0.12.0
+	set VERSION=v0.12.1
 )
 set INSTVERSION=%VERSION:~1%
 set WINVERSION=%VERSION:~1%.%CI_JOB_ID%
diff --git a/.gitlab-ci.yml b/.gitlab-ci.yml
index f2c85db6..c09836bd 100644
--- a/.gitlab-ci.yml
+++ b/.gitlab-ci.yml
@@ -99,8 +99,8 @@ pages:
     #- export LATEST_WINDOWS=$(curl "https://nheko.im/api/v4/projects/2/packages?package_name=windows&order_by=version&sort=desc" | jq -r '.[0].version')
     # hardcoded to avoid fuzzy matching
     - export LATEST_WINDOWS='0.12.0.35798'
-    - sed "s/0.12.0.0/${LATEST_WINDOWS_NIGHTLY}/g" -i resources/NhekoNightly.appinstaller
-    - sed "s/0.12.0.0/${LATEST_WINDOWS}/g" -i resources/Nheko.appinstaller
+    - sed "s/0.12.1.0/${LATEST_WINDOWS_NIGHTLY}/g" -i resources/NhekoNightly.appinstaller
+    - sed "s/0.12.1.0/${LATEST_WINDOWS}/g" -i resources/Nheko.appinstaller
     - mkdir public
     - mv resources/NhekoNightly.appinstaller public
     - mv resources/Nheko.appinstaller public
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 55d0076d..5ae2acd9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,15 @@
 # Changelog
 
-## [0.12.1] -- unreleased
+## [0.12.1] -- 2025-08-10
+
+### Security
+
+- Fix html escaping in several locations.
+  - Thank you, HarHarLinks, for the report.
+- Encode urls in tooltips to prevent confusion.
+  - Thank you, Emma, for the report.
+- Mark downloads with a "mark of the web" on Windows to warn before executing them.
+  - Thank you, DarkKirb, for the report.
 
 ### Features
 
diff --git a/CMakeLists.txt b/CMakeLists.txt
index edcb3a6e..4ff134c5 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -115,7 +115,7 @@ include(GNUInstallDirs)
 
 set(CPACK_PACKAGE_VERSION_MAJOR "0")
 set(CPACK_PACKAGE_VERSION_MINOR "12")
-set(CPACK_PACKAGE_VERSION_PATCH "0")
+set(CPACK_PACKAGE_VERSION_PATCH "1")
 set(PROJECT_VERSION_MAJOR ${CPACK_PACKAGE_VERSION_MAJOR})
 set(PROJECT_VERSION_MINOR ${CPACK_PACKAGE_VERSION_MINOR})
 set(PROJECT_VERSION_PATCH ${CPACK_PACKAGE_VERSION_PATCH})
diff --git a/resources/AppxManifest.xml b/resources/AppxManifest.xml
index 8253f839..2dcdd99e 100644
--- a/resources/AppxManifest.xml
+++ b/resources/AppxManifest.xml
@@ -4,7 +4,7 @@
   xmlns:uap="http://schemas.microsoft.com/appx/manifest/uap/windows10"
   xmlns:uap10="http://schemas.microsoft.com/appx/manifest/uap/windows10/10"
   xmlns:rescap="http://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities">
-  <Identity Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" ProcessorArchitecture="x64"/>
+  <Identity Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" ProcessorArchitecture="x64"/>
   <Properties>
     <DisplayName>Nheko</DisplayName>
     <PublisherDisplayName>Nheko-Reborn</PublisherDisplayName>
diff --git a/resources/Nheko.appinstaller b/resources/Nheko.appinstaller
index 004a0d73..2c027be8 100644
--- a/resources/Nheko.appinstaller
+++ b/resources/Nheko.appinstaller
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <AppInstaller Uri="https://nheko-reborn.pages.nheko.im/nheko/Nheko.appinstaller" Version="0.0.0.1" xmlns="http://schemas.microsoft.com/appx/appinstaller/2018">
-  <MainPackage Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows/0.12.0.0/nheko.msix" ProcessorArchitecture="x64" />
+  <MainPackage Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows/0.12.1.0/nheko.msix" ProcessorArchitecture="x64" />
   <UpdateSettings>
     <!-- We can't set this to check only once a month, so just check once a week. If the user doesn't want that ping, they should install the msix directly. -->
     <OnLaunch HoursBetweenUpdateChecks="168" ShowPrompt="true" />
diff --git a/resources/NhekoNightly.appinstaller b/resources/NhekoNightly.appinstaller
index 88f1fd8a..45d8a1d4 100644
--- a/resources/NhekoNightly.appinstaller
+++ b/resources/NhekoNightly.appinstaller
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="utf-8"?>
 <AppInstaller Uri="https://nheko-reborn.pages.nheko.im/nheko/NhekoNightly.appinstaller" Version="0.0.0.1" xmlns="http://schemas.microsoft.com/appx/appinstaller/2018">
-  <MainPackage Name="im.nheko.Nheko" Version="0.12.0.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows-nightly/0.12.0.0/nheko.msix" ProcessorArchitecture="x64" />
+  <MainPackage Name="im.nheko.Nheko" Version="0.12.1.0" Publisher="CN=Nicolas Werner, O=Nicolas Werner, L=Munich, S=Bavaria, C=DE" Uri="https://nheko.im/api/v4/projects/2/packages/generic/windows-nightly/0.12.1.0/nheko.msix" ProcessorArchitecture="x64" />
   <UpdateSettings>
     <!-- We can't set this to check only once a month, so just check once a week. If the user doesn't want that ping, they should install the msix directly. -->
     <OnLaunch HoursBetweenUpdateChecks="168" ShowPrompt="true" />
diff --git a/resources/nheko.appdata.xml.in b/resources/nheko.appdata.xml.in
index 0f7aad7d..aa206c4a 100644
--- a/resources/nheko.appdata.xml.in
+++ b/resources/nheko.appdata.xml.in
@@ -62,6 +62,13 @@
   <url type="homepage">https://github.com/Nheko-Reborn/nheko</url>
   <update_contact>https://github.com/Nheko-Reborn</update_contact>
   <releases>
+    <release date="2025-08-10" version="0.12.1">
+      <description>
+        <p>This release fixes a few security issues around rendering rich text messages. Otherwise it also includes a lot of minor improvements.</p>
+      </description>
+
+      <url>https://github.com/Nheko-Reborn/nheko/releases/tag/v0.12.1</url>
+    </release>
     <release date="2024-06-12" version="0.12.0">
       <description>
         <p>This release features a complete port to Qt6, intentional mentions, expiring messages, ignoring users, better sticker and emoji handling and much, much more!</p>