diff --git a/poetry.lock b/poetry.lock
index 5f8281da6..909124a94 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -196,21 +196,21 @@ uvloop = ["uvloop (>=0.15.2) ; sys_platform != \"win32\"", "winloop (>=0.5.0) ;
 
 [[package]]
 name = "bleach"
-version = "6.3.0"
+version = "6.4.0"
 description = "An easy safelist-based HTML-sanitizing tool."
 optional = false
 python-versions = ">=3.10"
 groups = ["main"]
 files = [
-    {file = "bleach-6.3.0-py3-none-any.whl", hash = "sha256:fe10ec77c93ddf3d13a73b035abaac7a9f5e436513864ccdad516693213c65d6"},
-    {file = "bleach-6.3.0.tar.gz", hash = "sha256:6f3b91b1c0a02bb9a78b5a454c92506aa0fdf197e1d5e114d2e00c6f64306d22"},
+    {file = "bleach-6.4.0-py3-none-any.whl", hash = "sha256:4b6b6a54fff2e69a3dde9d21cc6301220bee3c3cb792187d11403fd795031081"},
+    {file = "bleach-6.4.0.tar.gz", hash = "sha256:4202482733d85cedd04e59fcb2f89f4e4c7c385a78d3c3c23c30446843a37452"},
 ]
 
 [package.dependencies]
 webencodings = "*"
 
 [package.extras]
-css = ["tinycss2 (>=1.1.0,<1.5)"]
+css = ["tinycss2 (>=1.1.0)"]
 
 [[package]]
 name = "blinker"
@@ -4580,4 +4580,4 @@ cffi = ["cffi (>=1.17) ; python_version >= \"3.13\" and platform_python_implemen
 [metadata]
 lock-version = "2.1"
 python-versions = "^3.13.2"
-content-hash = "4dce900709e80b9373bd2a8491deef5a2bb10a8c7ac817de0c7d49e650184ad2"
+content-hash = "b6e33c7d2503fe4e2d6dfa5032716311750bd84aabdb7ecfca82542dcc46bed0"
diff --git a/pyproject.toml b/pyproject.toml
index e83271179..663bea321 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -40,7 +40,7 @@ wtforms = "~=3.1"
 markdown = "^3.10"
 mistune = "^3.2.1"
 async-timeout = "^5.0.1"
-bleach = "^6.3.0"
+bleach = "^6.4.0"
 boto3 = "^1.35.99"
 botocore = "^1.35.99"
 cachetools = "^7.0.1"