diff --git a/poetry.lock b/poetry.lock
index 20fd463..5169c54 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -33,14 +33,14 @@ trio = ["trio (>=0.31.0)"]
 
 [[package]]
 name = "bandit"
-version = "1.8.6"
+version = "1.9.2"
 description = "Security oriented static analyser for python code."
 optional = false
-python-versions = ">=3.9"
+python-versions = ">=3.10"
 groups = ["dev"]
 files = [
-    {file = "bandit-1.8.6-py3-none-any.whl", hash = "sha256:3348e934d736fcdb68b6aa4030487097e23a501adf3e7827b63658df464dddd0"},
-    {file = "bandit-1.8.6.tar.gz", hash = "sha256:dbfe9c25fc6961c2078593de55fd19f2559f9e45b99f1272341f5b95dea4e56b"},
+    {file = "bandit-1.9.2-py3-none-any.whl", hash = "sha256:bda8d68610fc33a6e10b7a8f1d61d92c8f6c004051d5e946406be1fb1b16a868"},
+    {file = "bandit-1.9.2.tar.gz", hash = "sha256:32410415cd93bf9c8b91972159d5cf1e7f063a9146d70345641cd3877de348ce"},
 ]
 
 [package.dependencies]
@@ -1166,4 +1166,4 @@ files = [
 [metadata]
 lock-version = "2.1"
 python-versions = ">=3.13,<4.0"
-content-hash = "dea48a1644ab2a0cbed34205c482bc84a7d532c7053043af4d37d9f796e11431"
+content-hash = "93c6fa95e582ad8d1ba27432219a162e66724e63c6ef0eb3e1e3016bab50f8d3"
diff --git a/pyproject.toml b/pyproject.toml
index 774e6cb..334552d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -48,7 +48,7 @@ build-backend = "poetry.core.masonry.api"
 ruff = "^0.14.6"
 taskipy = "^1.14.1"
 radon = "^6.0.1"
-bandit = "^1.8.6"
+bandit = "^1.9.2"
 mypy = "^1.18.2"
 
 [tool.ruff]