diff --git a/CHANGELOG.md b/CHANGELOG.md
index 8fba97036cd..0c7e1609437 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog
 
-## v2.13.0-rc.0
+## 2.13.0-rc.1
 
 ### Grafana Mimir
 
@@ -99,6 +99,7 @@
 * [BUGFIX] Ingester: fix context cancellation handling when a query is busy looking up series in the TSDB index and `-blocks-storage.tsdb.head-postings-for-matchers-cache*` or `-blocks-storage.tsdb.block-postings-for-matchers-cache*` are in use. #8337
 * [BUGFIX] Querier: fix edge case where bucket indexes are sometimes cached forever instead of with the expected TTL. #8343
 * [BUGFIX] OTLP handler: fix errors returned by OTLP handler when used via httpgrpc tunneling. #8363
+* [BUGFIX] Update `github.com/hashicorp/go-retryablehttp` to address [CVE-2024-6104](https://github.com/advisories/GHSA-v6v8-xj6m-xwqh). #8539
 
 ### Mixin
 
diff --git a/VERSION b/VERSION
index 63fb6530614..ef5811efe01 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-2.13.0-rc.0
+2.13.0-rc.1