diff --git a/api/poetry.lock b/api/poetry.lock
index 7414ed1c3..f642463cd 100644
--- a/api/poetry.lock
+++ b/api/poetry.lock
@@ -608,11 +608,11 @@ python-versions = "*"
 
 [[package]]
 name = "django-cors-headers"
-version = "3.8.0"
+version = "3.11.0"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 category = "main"
 optional = false
-python-versions = ">=3.6"
+python-versions = ">=3.7"
 
 [package.dependencies]
 Django = ">=2.2"
@@ -2080,7 +2080,7 @@ testing = ["coverage (>=5.0.3)", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "1.1"
 python-versions = "^3.7"
-content-hash = "cc0e3ec5e30e184c19748fd69c39b611b16f229c69aaa5d2ba0a13664d738c15"
+content-hash = "50048470d31acb56bf9644c19d5240e58d55bb4b0a6cf556d60236bf8bf79d45"
 
 [metadata.files]
 aiohttp = [
@@ -2448,8 +2448,8 @@ django-cleanup = [
     {file = "django_cleanup-5.2.0-py2.py3-none-any.whl", hash = "sha256:193cf69de54b9fc0a0f4547edbb3a63bbe01728cb029f9f4b7912098cc1bced7"},
 ]
 django-cors-headers = [
-    {file = "django-cors-headers-3.8.0.tar.gz", hash = "sha256:4b8e13bf8d3df50ac4b986bd87085c3073dd56402ede109222ea34a774f9ec1b"},
-    {file = "django_cors_headers-3.8.0-py3-none-any.whl", hash = "sha256:425c20ceffa42b9ac11b02611eece4ae6c5fef2ff0f039c14c1df20e00c80df8"},
+    {file = "django-cors-headers-3.11.0.tar.gz", hash = "sha256:eb98389bf7a2afc5d374806af4a9149697e3a6955b5a2dc2bf049f7d33647456"},
+    {file = "django_cors_headers-3.11.0-py3-none-any.whl", hash = "sha256:a22be2befd4069c4fc174f11cf067351df5c061a3a5f94a01650b4e928b0372b"},
 ]
 django-coverage-plugin = [
     {file = "django_coverage_plugin-2.0.2-py3-none-any.whl", hash = "sha256:4206c85ffba0301f83aecc38e5b01b1b9a4b45a545d9456a827e3fabea18d952"},
diff --git a/api/pyproject.toml b/api/pyproject.toml
index 56730e255..fc6520de0 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -18,7 +18,7 @@ django-redis = "==5.0.0"
 redis = "==3.5.3"
 kombu = "==5.2.3"
 celery = "==5.2.3"
-django-cors-headers = "==3.8.0"
+django-cors-headers = "==3.11.0"
 musicbrainzngs = "==0.7.1"
 djangorestframework = "==3.12.4"
 arrow = "==1.1.1"