diff --git a/Cargo.lock b/Cargo.lock
index dfe85d42692..0e864867e62 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4656,9 +4656,9 @@ dependencies = [
 
 [[package]]
 name = "spdx"
-version = "0.10.6"
+version = "0.10.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47317bbaf63785b53861e1ae2d11b80d6b624211d42cb20efcd210ee6f8a14bc"
+checksum = "bae30cc7bfe3656d60ee99bf6836f472b0c53dddcbf335e253329abb16e535a2"
 dependencies = [
  "smallvec",
 ]
diff --git a/Cargo.toml b/Cargo.toml
index 8856cd55bb1..6dc624bcbae 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -105,7 +105,7 @@ sentry = { version = "=0.34.0", features = ["tracing", "tower", "tower-axum-matc
 serde = { version = "=1.0.215", features = ["derive"] }
 serde_json = "=1.0.132"
 sha2 = "=0.10.8"
-spdx = "=0.10.6"
+spdx = "=0.10.7"
 tar = "=0.4.43"
 tempfile = "=3.14.0"
 thiserror = "=2.0.3"