diff --git a/carbonserver/pyproject.toml b/carbonserver/pyproject.toml
index 78eb36ca5..a0fde0940 100644
--- a/carbonserver/pyproject.toml
+++ b/carbonserver/pyproject.toml
@@ -40,7 +40,7 @@ dependencies = [
     "joserfc>=1.0.0",
     "itsdangerous>=2.2.0",
     # Alembic depends on Mako but does not currently require the CVE-fixed version.
-    "mako>=1.3.12",
+    "mako>=1.4.3",
 ]
 
 [project.optional-dependencies]
diff --git a/requirements/requirements-api.txt b/requirements/requirements-api.txt
index 44e1f561d..00ffe403a 100644
--- a/requirements/requirements-api.txt
+++ b/requirements/requirements-api.txt
@@ -546,9 +546,9 @@ joserfc==1.7.0 \
     # via
     #   carbonserver (carbonserver/pyproject.toml)
     #   authlib
-mako==1.3.12 \
-    --hash=sha256:8f61569480282dbf557145ce441e4ba888be453c30989f879f0d652e39f53ea9 \
-    --hash=sha256:9f778e93289bd410bb35daadeb4fc66d95a746f0b75777b942088b7fd7af550a
+mako==1.4.2 \
+    --hash=sha256:7227a060ee3af55a493af61d73d6beef13044b81dba9586736c13945f09464ce \
+    --hash=sha256:e70a2a4308952b33a21208bfd6725da79fae5a8c224578f8cfdeb60e5ace03df
     # via
     #   carbonserver (carbonserver/pyproject.toml)
     #   alembic