diff --git a/requirements.txt b/requirements.txt
index 16237c7484..06b2574e05 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -163,7 +163,7 @@ webdriver_manager==4.0.1
 # Security and audit
 mistune==3.0.2
 protobuf==3.20.3
-mako==1.3.3
+mako==1.3.8
 paramiko==3.4.0 # not directly required, fixes Blowfish deprecation warning
 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
 jwcrypto>=1.5.6 # not directly required, pinned by Snyk to avoid a vulnerability