diff --git a/changelog/security/2023-07-13-protobuf-21.9.md b/changelog/security/2023-07-13-protobuf-21.9.md
new file mode 100644
index 0000000000..60078cb44e
--- /dev/null
+++ b/changelog/security/2023-07-13-protobuf-21.9.md
@@ -0,0 +1 @@
+- protobuf ([CVE-2022-1941](https://nvd.nist.gov/vuln/detail/CVE-2022-1941))
diff --git a/changelog/updates/2023-07-13-protobuf-21.9.md b/changelog/updates/2023-07-13-protobuf-21.9.md
new file mode 100644
index 0000000000..58a788a448
--- /dev/null
+++ b/changelog/updates/2023-07-13-protobuf-21.9.md
@@ -0,0 +1 @@
+- protobuf ([21.9](https://github.com/protocolbuffers/protobuf/releases/tag/v21.9))