diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8ea7d17821..7a17ff71cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,8 +7,14 @@ Canonical reference for changes, improvements, and bugfixes for Boundary.
 ### New and Improved
 
 * Added support for IBM Passport Advantage Online licensing. You can now use PAO to enable Boundary Enterprise.
+* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))
 * Updated internal dependencies.
 
+### Security
+
+* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
+* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))
+
 ## 0.21.2 (2026/04/06)
 
 ### New and Improved