diff --git a/pkgs/development/libraries/gstreamer/good/default.nix b/pkgs/development/libraries/gstreamer/good/default.nix
index 09ff38d6fe21..4b66be2726ad 100644
--- a/pkgs/development/libraries/gstreamer/good/default.nix
+++ b/pkgs/development/libraries/gstreamer/good/default.nix
@@ -1,5 +1,6 @@
 { stdenv
 , fetchurl
+, fetchpatch
 , meson
 , ninja
 , pkgconfig
@@ -55,7 +56,21 @@ stdenv.mkDerivation rec {
     sha256 = "0pzq565ijl5z3mphvix34878m7hck6a58rdpj7sp7rixwwzkm8nk";
   };
 
-  patches = [ ./fix_pkgconfig_includedir.patch ];
+  patches = [
+    ./fix_pkgconfig_includedir.patch
+    (fetchpatch {
+      # https://gstreamer.freedesktop.org/security/sa-2021-0002.html
+      name = "CVE-2021-3497.patch";
+      url = "https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/commit/9181191511f9c0be6a89c98b311f49d66bd46dc3.patch";
+      sha256 = "10dvfxrw7l3gflk9fzn5x18vkj4080dfkjnzldc12r5mnl37qdz8";
+    })
+    (fetchpatch {
+      # https://gstreamer.freedesktop.org/security/sa-2021-0003.html
+      name = "CVE-2021-3498.patch";
+      url = "https://gitlab.freedesktop.org/gstreamer/gst-plugins-good/-/commit/02174790726dd20a5c73ce2002189bf240ad4fe0.patch";
+      sha256 = "1sygia6z0yv5grzii6z9bviwi6rm6br3xjr0cnffsji6z943d7vc";
+    })
+  ];
 
   nativeBuildInputs = [
     pkgconfig