diff --git a/api/poetry.lock b/api/poetry.lock
index 24e1b213e..599f74c6d 100644
--- a/api/poetry.lock
+++ b/api/poetry.lock
@@ -638,14 +638,14 @@ python-versions = "*"
 
 [[package]]
 name = "django-cors-headers"
-version = "3.11.0"
+version = "3.13.0"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 category = "main"
 optional = false
 python-versions = ">=3.7"
 
 [package.dependencies]
-Django = ">=2.2"
+Django = ">=3.2"
 
 [[package]]
 name = "django-coverage-plugin"
@@ -2114,7 +2114,7 @@ testing = ["coverage (>=5.0.3)", "zope.event", "zope.testing"]
 [metadata]
 lock-version = "1.1"
 python-versions = "^3.7"
-content-hash = "5690e33aedfee6995ba1eafbf1105690d08811c18033d5f6cf6fefd97f6a1f20"
+content-hash = "6d8425c753a1534f501d7f194885d5241f4d96154ddb7c75bc489808f835a095"
 
 [metadata.files]
 aiohttp = [
@@ -2499,8 +2499,8 @@ django-cleanup = [
     {file = "django_cleanup-6.0.0-py2.py3-none-any.whl", hash = "sha256:997feab3b1f7a2e84f71c29e83b1d664459ec0d4b1924977b1fa25b5babb8703"},
 ]
 django-cors-headers = [
-    {file = "django-cors-headers-3.11.0.tar.gz", hash = "sha256:eb98389bf7a2afc5d374806af4a9149697e3a6955b5a2dc2bf049f7d33647456"},
-    {file = "django_cors_headers-3.11.0-py3-none-any.whl", hash = "sha256:a22be2befd4069c4fc174f11cf067351df5c061a3a5f94a01650b4e928b0372b"},
+    {file = "django-cors-headers-3.13.0.tar.gz", hash = "sha256:f9dc6b4e3f611c3199700b3e5f3398c28757dcd559c2f82932687f3d0443cfdf"},
+    {file = "django_cors_headers-3.13.0-py3-none-any.whl", hash = "sha256:37e42883b5f1f2295df6b4bba96eb2417a14a03270cb24b2a07f021cd4487cf4"},
 ]
 django-coverage-plugin = [
     {file = "django_coverage_plugin-2.0.3-py3-none-any.whl", hash = "sha256:fd888f2ff41e3410a004d799b198cf8b19694d692a2d2264e8c944b9321bedc3"},
diff --git a/api/pyproject.toml b/api/pyproject.toml
index cafb5b637..b386e2312 100644
--- a/api/pyproject.toml
+++ b/api/pyproject.toml
@@ -18,7 +18,7 @@ django-redis = "==5.2.0"
 redis = "==4.1.4"
 kombu = "==5.2.4"
 celery = "==5.2.7"
-django-cors-headers = "==3.11.0"
+django-cors-headers = "==3.13.0"
 musicbrainzngs = "==0.7.1"
 djangorestframework = "==3.13.1"
 arrow = "==1.2.2"