diff --git a/api/poetry.lock b/api/poetry.lock
index 33e0c84574ce3f1919a087b32bcd40d3010c6531..a522cd7784f44c7a041eca666f600cf242f25063 100644
--- a/api/poetry.lock
+++ b/api/poetry.lock
@@ -1184,16 +1184,17 @@ files = [
 
 [[package]]
 name = "django-cors-headers"
-version = "3.13.0"
+version = "4.3.1"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.8"
 files = [
-    {file = "django-cors-headers-3.13.0.tar.gz", hash = "sha256:f9dc6b4e3f611c3199700b3e5f3398c28757dcd559c2f82932687f3d0443cfdf"},
-    {file = "django_cors_headers-3.13.0-py3-none-any.whl", hash = "sha256:37e42883b5f1f2295df6b4bba96eb2417a14a03270cb24b2a07f021cd4487cf4"},
+    {file = "django-cors-headers-4.3.1.tar.gz", hash = "sha256:0bf65ef45e606aff1994d35503e6b677c0b26cafff6506f8fd7187f3be840207"},
+    {file = "django_cors_headers-4.3.1-py3-none-any.whl", hash = "sha256:0b1fd19297e37417fc9f835d39e45c8c642938ddba1acce0c1753d3edef04f36"},
 ]
 
 [package.dependencies]
+asgiref = ">=3.6"
 Django = ">=3.2"
 
 [[package]]
@@ -4678,4 +4679,4 @@ typesense = ["typesense"]
 [metadata]
 lock-version = "2.0"
 python-versions = "^3.8,<3.13"
-content-hash = "cb48c83de814b32f508bbaacc756113b1a559360ebe523f3760677752730bb94"
+content-hash = "34224a2233d16ca90ef6b82816e7af7eab6aea555344944816769f9207cb4189"
diff --git a/api/pyproject.toml b/api/pyproject.toml
index d43fc023941135708c4eff7d9cf5410c3f1c5fdf..2845626fd75b3be1d533a812dbafe8fae063e9a3 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -34,7 +34,7 @@ django-allauth = "0.55.2"
 django-cache-memoize = "0.1.10"
 django-cacheops = "==7.0.2"
 django-cleanup = "==8.1.0"
-django-cors-headers = "==3.13.0"
+django-cors-headers = "==4.3.1"
 django-dynamic-preferences = "==1.14.0"
 django-environ = "==0.10.0"
 django-filter = "==22.1"