diff --git a/changelog/security/2024-10-02-expat-backport.md b/changelog/security/2024-10-02-expat-backport.md
new file mode 100644
index 0000000000..c0b76856e2
--- /dev/null
+++ b/changelog/security/2024-10-02-expat-backport.md
@@ -0,0 +1 @@
+- expat ([CVE-2024-45490](https://nvd.nist.gov/vuln/detail/CVE-2024-45490))
diff --git a/changelog/updates/2024-10-02-expat-backport.md b/changelog/updates/2024-10-02-expat-backport.md
new file mode 100644
index 0000000000..eab56d37b0
--- /dev/null
+++ b/changelog/updates/2024-10-02-expat-backport.md
@@ -0,0 +1 @@
+- expat ([2.6.3](https://github.com/libexpat/libexpat/blob/R_2_6_3/expat/Changes))