diff --git a/.changelog/19320.txt b/.changelog/19320.txt
new file mode 100644
index 000000000..678e2af71
--- /dev/null
+++ b/.changelog/19320.txt
@@ -0,0 +1,3 @@
+```release-note:security
+build: Update to go1.21.5 to resolve Windows path validation CVE in Go
+```