diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0777f066db..6d3bd0e2f9 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+### Internal Changes
+
+- (deps) Bump the Volta-pinned Node.js version from 24.8.0 to 24.22.1. This security release distrusts the compromised eMudhra/emSign CA keys ([#3452](https://github.com/getsentry/sentry-cli/pull/3452)).
+
 ## 3.8.1
 
 ### Fixes
diff --git a/package.json b/package.json
index a2114a6689..9fc15aeed8 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,7 @@
     "test:vercel-nft": "node scripts/test-vercel-nft.js"
   },
   "volta": {
-    "node": "24.8.0",
+    "node": "24.22.1",
     "npm": "11.6.0"
   },
   "overrides": {