diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 53d0ebf370..8b6864334f 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -58,7 +58,7 @@ jobs:
 
       - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5
         with:
-          python-version: "3.12.3"
+          python-version: "3.12.4"
           cache: "poetry"
 
       - name: Validate lockfile
diff --git a/Dockerfile b/Dockerfile
index ea13fce231..02eff6b52d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.12.3
+FROM python:3.12.4
 LABEL maintainer "ODL DevOps <mitx-devops@mit.edu>"
 
 # Add package files, install updated node and pip
diff --git a/poetry.lock b/poetry.lock
index 0e80c502e0..c11feec99a 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -4040,5 +4040,5 @@ test = ["big-O", "importlib-resources", "jaraco.functools", "jaraco.itertools",
 
 [metadata]
 lock-version = "2.0"
-python-versions = "3.12.3"
-content-hash = "1c3c152e7176b62a239047fb1617e1b9e1727938de8a0a8b8c24a52833268290"
+python-versions = "3.12.4"
+content-hash = "5c3be114a978f1e73fe1ad41cc832a8382d368e84b87f37bc8c5649404c3896c"
diff --git a/pyproject.toml b/pyproject.toml
index ef2123b638..853149b7f6 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -9,7 +9,7 @@ authors  = ["MIT ODL"]
 
 
 [tool.poetry.dependencies]
-python = "3.12.3"
+python = "3.12.4"
 attrs = "^23.1.0"
 base36 = "^0.1.1"
 beautifulsoup4 = "^4.8.2"