diff --git a/Cargo.lock b/Cargo.lock
index 75c6d999d97..cd4d4e43de9 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4784,9 +4784,9 @@ dependencies = [
 
 [[package]]
 name = "spdx"
-version = "0.10.7"
+version = "0.10.8"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bae30cc7bfe3656d60ee99bf6836f472b0c53dddcbf335e253329abb16e535a2"
+checksum = "58b69356da67e2fc1f542c71ea7e654a361a79c938e4424392ecf4fa065d2193"
 dependencies = [
  "smallvec",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 6ed105bf272..524e8af3b6c 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -111,7 +111,7 @@ sentry = { version = "=0.35.0", features = ["tracing", "tower", "tower-axum-matc
 serde = { version = "=1.0.217", features = ["derive"] }
 serde_json = "=1.0.134"
 sha2 = "=0.10.8"
-spdx = "=0.10.7"
+spdx = "=0.10.8"
 tar = "=0.4.43"
 tempfile = "=3.14.0"
 thiserror = "=2.0.9"