diff --git a/requirements/requirements.in b/requirements/requirements.in
index e1385e4a..57910d8d 100644
--- a/requirements/requirements.in
+++ b/requirements/requirements.in
@@ -12,7 +12,7 @@ cryptography>=46.0.6  # CVE-2026-34073
 Cython<3 # this is needed as a build dependency, one day we may have separated build deps
 daphne
 distro
-django>=5.2.12,<6.0 # CVE-2026-25674
+django>=5.2.13,<6.0 # CVE-2026-3902 CVE-2026-33034 CVE-2026-33033 CVE-2026-4292 CVE-2026-4277
 django-auth-ldap
 django-cors-headers
 django-extensions==4.1
diff --git a/requirements/requirements.txt b/requirements/requirements.txt
index f47cda4c..9448ad4a 100644
--- a/requirements/requirements.txt
+++ b/requirements/requirements.txt
@@ -119,7 +119,7 @@ defusedxml==0.7.1
     #   social-auth-core
 distro==1.9.0
     # via -r /awx_devel/requirements/requirements.in
-django==5.2.12
+django==5.2.13
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   channels