diff --git a/requirements.txt b/requirements.txt
index c6b4132b859..0068833ccce 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -172,7 +172,7 @@ webdriver_manager==4.0.1
 # Security and audit
 mistune==3.0.2
 protobuf==3.20.3
-mako==1.3.3
+mako==1.3.8
 paramiko==3.4.0 # not directly required, fixes Blowfish deprecation warning
 certifi>=2023.7.22 # not directly required, pinned by Snyk to avoid a vulnerability
 jwcrypto>=1.5.6 # not directly required, pinned by Snyk to avoid a vulnerability