diff --git a/changelog/security/2023-10-11-curl-update.md b/changelog/security/2023-10-11-curl-update.md
new file mode 100644
index 0000000000..9ad66702d5
--- /dev/null
+++ b/changelog/security/2023-10-11-curl-update.md
@@ -0,0 +1 @@
+- curl ([CVE-2023-38545](https://nvd.nist.gov/vuln/detail/CVE-2023-38545), [CVE-2023-38546](https://nvd.nist.gov/vuln/detail/CVE-2023-38546))
diff --git a/changelog/updates/2023-10-11-curl-update.md b/changelog/updates/2023-10-11-curl-update.md
new file mode 100644
index 0000000000..d5b4170e2f
--- /dev/null
+++ b/changelog/updates/2023-10-11-curl-update.md
@@ -0,0 +1 @@
+- curl ([8.4.0](https://curl.se/changes.html#8_4_0))