diff --git a/pyproject.toml b/pyproject.toml
index 232f8557e..b770dad14 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -13,7 +13,7 @@ dependencies = [
     "django-bootstrap-icons==0.9.0",
     "django-bootstrap5==22.2",
     "django-celery-beat==2.8.1",
-    "django-cors-headers==3.13.0",
+    "django-cors-headers==4.9.0",
     "django-countries==7.6.1",
     "django-extensions==4.1",
     "django-filter==2.4.0",
diff --git a/uv.lock b/uv.lock
index 773401718..0f8862a62 100644
--- a/uv.lock
+++ b/uv.lock
@@ -392,14 +392,15 @@ wheels = [
 
 [[package]]
 name = "django-cors-headers"
-version = "3.13.0"
+version = "4.9.0"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
+    { name = "asgiref" },
     { name = "django" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/98/2b/47fee7c14776039436c74463ce19ef0b839fbc95fdf8fa870ab25f193d9d/django-cors-headers-3.13.0.tar.gz", hash = "sha256:f9dc6b4e3f611c3199700b3e5f3398c28757dcd559c2f82932687f3d0443cfdf", size = 20995, upload-time = "2022-06-05T15:24:54.607Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/21/39/55822b15b7ec87410f34cd16ce04065ff390e50f9e29f31d6d116fc80456/django_cors_headers-4.9.0.tar.gz", hash = "sha256:fe5d7cb59fdc2c8c646ce84b727ac2bca8912a247e6e68e1fb507372178e59e8", size = 21458, upload-time = "2025-09-18T10:40:52.326Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/db/e2/912cdc408f7ddc07967e94c3d785389c36fbfdcb48755393fbf65a02aabf/django_cors_headers-3.13.0-py3-none-any.whl", hash = "sha256:37e42883b5f1f2295df6b4bba96eb2417a14a03270cb24b2a07f021cd4487cf4", size = 13115, upload-time = "2022-06-05T15:24:53.149Z" },
+    { url = "https://files.pythonhosted.org/packages/30/d8/19ed1e47badf477d17fb177c1c19b5a21da0fd2d9f093f23be3fb86c5fab/django_cors_headers-4.9.0-py3-none-any.whl", hash = "sha256:15c7f20727f90044dcee2216a9fd7303741a864865f0c3657e28b7056f61b449", size = 12809, upload-time = "2025-09-18T10:40:50.843Z" },
 ]
 
 [[package]]
@@ -901,7 +902,7 @@ requires-dist = [
     { name = "django-bootstrap-icons", specifier = "==0.9.0" },
     { name = "django-bootstrap5", specifier = "==22.2" },
     { name = "django-celery-beat", specifier = "==2.8.1" },
-    { name = "django-cors-headers", specifier = "==3.13.0" },
+    { name = "django-cors-headers", specifier = "==4.9.0" },
     { name = "django-countries", specifier = "==7.6.1" },
     { name = "django-extensions", specifier = "==4.1" },
     { name = "django-filter", specifier = "==2.4.0" },