diff --git a/requirements/lint.txt b/requirements/lint.txt
index 80e2c0c67a..6c794b50a3 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -8,7 +8,7 @@
 # are pinned to prevent unexpected linting failures when tools update)
 ruff==0.9.7
 mypy==1.15.0
-zizmor==1.3.1
+zizmor==1.4.1
 
 # Required for type stubs
 freezegun==1.5.1
diff --git a/requirements/pinned.txt b/requirements/pinned.txt
index 038c8af1b0..d73f7fc7cc 100644
--- a/requirements/pinned.txt
+++ b/requirements/pinned.txt
@@ -6,7 +6,7 @@
 #
 cffi==1.17.1
     # via cryptography
-cryptography==44.0.1
+cryptography==44.0.2
     # via securesystemslib
 pycparser==2.22
     # via cffi