diff --git a/CHANGELOG.md b/CHANGELOG.md
index 814b9ec5a..0d9151a16 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,18 @@
 
 All notable changes to this project are documented in this file.
 
+## 1.7.4-est-1
+
+**Release date:** 2026-05-13
+
+This release is generated by EST, not by the Flux project
+
+This is an EST patch release to remediate CVE-2026-25934 and CVE-2026-22703
+
+Fixes:
+- Remediate CVE-2026-25934 CVE-2026-22703
+ [#1](https://github.com/Nordix/source-controller/pull/1)
+
 ## 1.7.4
 
 **Release date:** 2025-11-19
diff --git a/config/manager/kustomization.yaml b/config/manager/kustomization.yaml
index 08b545218..88da45100 100644
--- a/config/manager/kustomization.yaml
+++ b/config/manager/kustomization.yaml
@@ -5,5 +5,5 @@ resources:
 - deployment.yaml
 images:
 - name: fluxcd/source-controller
-  newName: fluxcd/source-controller
-  newTag: v1.7.4
+  newName: registry.nordix.org/allies/source-controller
+  newTag: v1.7.4-est-1
diff --git a/go.mod b/go.mod
index f4e80ca3b..27a226c58 100644
--- a/go.mod
+++ b/go.mod
@@ -40,7 +40,7 @@ require (
 	github.com/fluxcd/pkg/tar v0.16.0
 	github.com/fluxcd/pkg/testserver v0.13.0
 	github.com/fluxcd/pkg/version v0.11.0
-	github.com/fluxcd/source-controller/api v1.7.4
+	github.com/fluxcd/source-controller/api v1.7.4-est-1
 	github.com/foxcpp/go-mockdns v1.1.0
 	github.com/go-git/go-billy/v5 v5.6.2
 	github.com/go-git/go-git/v5 v5.16.5