diff --git a/.github/workflows/pr_build.yaml b/.github/workflows/pr_build.yaml
index a7d7a271cc..cab8e059ea 100644
--- a/.github/workflows/pr_build.yaml
+++ b/.github/workflows/pr_build.yaml
@@ -3,7 +3,7 @@ on:
   pull_request: {}
   workflow_dispatch: {}
 env:
-  GO_VERSION: 1.18.4
+  GO_VERSION: 1.18.6
 permissions:
   contents: read
 
diff --git a/.github/workflows/release_build.yaml b/.github/workflows/release_build.yaml
index 76489c1ab9..2935ccf40b 100644
--- a/.github/workflows/release_build.yaml
+++ b/.github/workflows/release_build.yaml
@@ -4,7 +4,7 @@ on:
     tags:
       - 'v[0-9].[0-9]+.[0-9]+'
 env:
-  GO_VERSION: 1.18.4
+  GO_VERSION: 1.18.6
 jobs:
   cache-deps:
     name: cache-deps (linux)
diff --git a/.go-version b/.go-version
index a67b05e878..04a8bc26d1 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.18.4
+1.18.6
diff --git a/CHANGELOG.md b/CHANGELOG.md
index dd64c41835..815c1d7798 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## [1.4.1] - 2022-09-06
+
+### Security
+- Updated to Go 1.18.6 to address CVE-2022-27664
+
 ## [1.4.0] - 2022-08-08
 
 ### Added 
@@ -27,6 +32,11 @@
 - The deprecated webhook mode from the k8s-workload-registrar (#3235)
 - Support for the configmap leader election lock type from the k8s-workload-registrar (#3241)
 
+## [1.3.4] - 2022-09-06
+
+### Security
+- Updated to Go 1.18.6 to address CVE-2022-27664
+
 ## [1.3.3] - 2022-07-13
 
 ### Security