diff --git a/requirements/requirements.in b/requirements/requirements.in
index cd80cf1756..369fc9111b 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -25,7 +25,7 @@ djangorestframework-yaml
 drf-spectacular>=0.27.0
 dynaconf
 filelock
-GitPython>=3.1.37  # CVE-2023-41040
+GitPython>=3.1.49
 grpcio
 irc
 jinja2>=3.1.6  # CVE-2025-27516
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 36f8e22a9d..1fcf62301c 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -182,7 +182,7 @@ frozenlist==1.8.0
     #   aiosignal
 gitdb==4.0.12
     # via gitpython
-gitpython==3.1.45
+gitpython==3.1.49
     # via -r /awx_devel/requirements/requirements.in
 googleapis-common-protos==1.70.0
     # via