diff --git a/CHANGELOG.md b/CHANGELOG.md
index 75ce03c8..2c33d165 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -8,6 +8,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Fixed
 - `RemoveScheme` function in `irmaclient` already stripping storage before checking whether the scheme is in assets
 
+### Security
+- Update go toolchain to 1.21.5
+
 ## [0.15.0] - 2023-12-11
 ### Added
 - Support for Redis in Sentinel mode
diff --git a/go.mod b/go.mod
index 44b2dd45..aec2fe7e 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/privacybydesign/irmago
 
 go 1.21
 
-toolchain go1.21.3
+toolchain go1.21.5
 
 require (
 	github.com/alexandrevicenzi/go-sse v1.6.0