diff --git a/requirements/requirements.in b/requirements/requirements.in
index 0e73068aa2..3cb7e3dc12 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -13,7 +13,7 @@ cryptography
 Cython
 daphne>=4.2.2
 distro
-django>=5.2,<5.3  # Django 5.2 LTS, allow patch updates
+django>=5.2.17,<5.3  # Django 5.2 LTS, allow patch updates, CVE-2026-15307
 django-cors-headers
 django-crum
 django-extensions
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index 9c044f5382..c88ffb6a0a 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -123,7 +123,7 @@ dispatcherd[pg-notify]==2026.3.25
     # via -r /awx_devel/requirements/requirements.in
 distro==1.9.0
     # via -r /awx_devel/requirements/requirements.in
-django==5.2.8
+django==5.2.17
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   channels