diff --git a/docs/generators/changelog/versions/2.14.md b/docs/generators/changelog/versions/2.14.md
index 82c8490822..c7becc258d 100644
--- a/docs/generators/changelog/versions/2.14.md
+++ b/docs/generators/changelog/versions/2.14.md
@@ -151,6 +151,14 @@ TODO: @matheusccastroo sample on how the new config should look and link to rele
 * `tinytest@get-version`
   - Removed Underscore dependency
 
+* `webapp@get-version`
+  - Updated `cordova-plugin-meteor-webapp` to v2.0.3
+  - Updated `cookie-parser` to v1.4.6
+  - Updated `send` to v0.18.0
+  - Updated `stream-to-string` to v1.2.1
+  - Updated `qs` to v6.11.2
+  - Updated `@types/connect` to v3.4.38
+
 
 ## Independent releases
 
@@ -166,7 +174,8 @@ TODO: @matheusccastroo sample on how the new config should look and link to rele
 * NPM `cordova-plugin-meteor-webapp@2.0.2`
   - Fixed Android hot code push failing
 
-* 
+* NPM `cordova-plugin-meteor-webapp@2.0.3`
+  - Fix pull manifest from correct url if parameter are used in baseurl
 
 ## Contributors
 
diff --git a/packages/webapp/package.js b/packages/webapp/package.js
index 795af79624..86810d04c0 100644
--- a/packages/webapp/package.js
+++ b/packages/webapp/package.js
@@ -5,17 +5,17 @@ Package.describe({
 
 Npm.depends({
   'basic-auth-connect': '1.0.0',
-  'cookie-parser': '1.4.5',
+  'cookie-parser': '1.4.6',
   connect: '3.7.0',
   compression: '1.7.4',
   errorhandler: '1.5.1',
   parseurl: '1.3.3',
-  send: '0.17.1',
-  'stream-to-string': '1.2.0',
-  qs: '6.10.1',
+  send: '0.18.0',
+  'stream-to-string': '1.2.1',
+  qs: '6.11.2',
   useragent: '2.3.0',
   '@vlasky/whomst': '0.1.7',
-  '@types/connect': '3.4.35',
+  '@types/connect': '3.4.38',
 });
 
 Npm.strip({
@@ -25,7 +25,7 @@ Npm.strip({
 
 // whitelist plugin is now included in the core
 Cordova.depends({
-  'cordova-plugin-meteor-webapp': '2.0.0',
+  'cordova-plugin-meteor-webapp': '2.0.3',
 });
 
 Package.onUse(function(api) {