diff --git a/CHANGELOG.md b/CHANGELOG.md
index c39a0ef8..a933c9fc 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,12 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## 0.4.2
+### Added
+## fixed
+- KICS findings fixed
+
+
 ## 0.4.1
 ### Added
 - Added API POST lookup/shellsByAssetLink to retrieve shell ids without base64 encryption.
diff --git a/access-control-service-sql-impl/src/main/resources/static/access-control-openapi.yaml b/access-control-service-sql-impl/src/main/resources/static/access-control-openapi.yaml
index bf7f8498..6af0b7e4 100644
--- a/access-control-service-sql-impl/src/main/resources/static/access-control-openapi.yaml
+++ b/access-control-service-sql-impl/src/main/resources/static/access-control-openapi.yaml
@@ -73,6 +73,7 @@ paths:
                 properties:
                   items:
                     type: array
+                    maxItems: 10000
                     items:
                       $ref: './access-control-openapi_schemas.yaml#/schemas/ReadUpdateAccessRule'
                 required:
diff --git a/backend/src/main/resources/static/aas-registry-openapi.yaml b/backend/src/main/resources/static/aas-registry-openapi.yaml
index caafc23e..7a2aa935 100644
--- a/backend/src/main/resources/static/aas-registry-openapi.yaml
+++ b/backend/src/main/resources/static/aas-registry-openapi.yaml
@@ -791,6 +791,7 @@ paths:
                     properties:
                       result:
                         type: array
+                        maxItems: 1000
                         items:
                           type: string
         '400':