diff --git a/changelog.d/1458-node-24-22-1-security-release.md b/changelog.d/1458-node-24-22-1-security-release.md
new file mode 100644
index 000000000..a440892a8
--- /dev/null
+++ b/changelog.d/1458-node-24-22-1-security-release.md
@@ -0,0 +1,3 @@
+- The Docker image and CI now pin Node 24.22.1, the first 24.x release with
+  the October 21, 2026 security fixes, including CVE-2026-111497 (a Brotli
+  decoder flaw that can lead to remote code execution) (anobjectn, #1458).