diff --git a/CHANGELOG.md b/CHANGELOG.md
index 085aa507d..23d39c090 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## Unreleased
+
+Project changes:
+
+* Add `toolchain go1.27.3` directive to go.mod for vulnerbility fix.
+
 ## 3.13.3
 
 Improvements:
diff --git a/go.mod b/go.mod
index 811f12b2c..8b14c2005 100644
--- a/go.mod
+++ b/go.mod
@@ -2,6 +2,8 @@ module github.com/getsops/sops/v3
 
 go 1.25.8
 
+toolchain go1.27.3
+
 require (
 	cloud.google.com/go/kms v1.33.0
 	cloud.google.com/go/storage v1.66.0