diff --git a/CHANGELOG.md b/CHANGELOG.md
index 6f879507..2511cf83 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -10,6 +10,8 @@ Note: In this file, do not use the hard wrap in the middle of a sentence for com
 
 ## [Unreleased]
 
+- Update `osv-scanner@latest` to 2.3.8.
+
 - Update `mise@latest` to 2026.5.2.
 
 ## [2.77.2] - 2026-05-08
diff --git a/manifests/osv-scanner.json b/manifests/osv-scanner.json
index 816ffce7..80f88325 100644
--- a/manifests/osv-scanner.json
+++ b/manifests/osv-scanner.json
@@ -2,13 +2,13 @@
   "rust_crate": null,
   "template": null,
   "latest": {
-    "version": "2.3.6"
+    "version": "2.3.8"
   },
   "2": {
-    "version": "2.3.6"
+    "version": "2.3.8"
   },
   "2.3": {
-    "version": "2.3.6"
+    "version": "2.3.8"
   },
   "2.3.8": {
     "x86_64_linux_musl": {