diff --git a/pyproject.toml b/pyproject.toml
index 3d989ce..da9bee5 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -27,7 +27,7 @@ classifiers = [
 # contradicts the "any OS" thesis.
 dependencies = [
     "Jinja2==3.1.6",
-    "MarkupSafe==3.0.3",
+    "MarkupSafe==3.0.4",
     "numpy==2.5.1",
     "typing_extensions==4.16.0",
     "rich>=13.7.0",
diff --git a/requirements.txt b/requirements.txt
index 4742fdc..87e06a4 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,7 +1,7 @@
 # Compatibility manifest. pyproject.toml is the canonical dependency source.
 # Sistemista talks to a separate llama-server process; llama-cpp-python is not required.
 Jinja2==3.1.6
-MarkupSafe==3.0.3
+MarkupSafe==3.0.4
 numpy==2.5.1
 typing_extensions==4.16.0