diff --git a/CHANGELOG.md b/CHANGELOG.md
index ea52e2a6b..ee57e2a76 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Security
 
 - Update Drupal core to 9.3.16 for [SA-CORE-2022-011](https://www.drupal.org/sa-core-2022-011).
+- Update Drupal core to 9.3.19 for [SA-CORE-2022-012](https://www.drupal.org/sa-core-2022-012), [SA-CORE-2022-013](https://www.drupal.org/sa-core-2022-013), [SA-CORE-2022-014](https://www.drupal.org/sa-core-2022-014), and [SA-CORE-2022-015](https://www.drupal.org/sa-core-2022-015).
 
 ## [2.0.0-beta5] 2022-06-02
 
diff --git a/composer.json b/composer.json
index 11a6dd825..4d0182bf0 100644
--- a/composer.json
+++ b/composer.json
@@ -18,7 +18,7 @@
     "require": {
         "cweagans/composer-patches": "^1.6",
         "drupal/admin_toolbar": "^2.4",
-        "drupal/core": "9.3.16",
+        "drupal/core": "9.3.19",
         "drupal/config_update": "^1.7",
         "drupal/csv_serialization": "^2.0",
         "drupal/date_popup": "^1.1",
diff --git a/composer.project.json b/composer.project.json
index 1e4e9e6c8..be4ae6840 100644
--- a/composer.project.json
+++ b/composer.project.json
@@ -1,11 +1,11 @@
 {
     "require": {
         "cweagans/composer-patches": "^1.7",
-        "drupal/core-composer-scaffold": "9.3.16"
+        "drupal/core-composer-scaffold": "9.3.19"
     },
     "require-dev": {
         "brianium/paratest": "^4",
-        "drupal/core-dev": "9.3.16",
+        "drupal/core-dev": "9.3.19",
         "phpspec/prophecy-phpunit": "^2",
         "symfony/finder": "^4.0"
     },