diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 3d7aca8..0053505 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -174,7 +174,7 @@ jobs:
       - name: Generate feed fixtures
         run: |
           set -euo pipefail
-          python -m pip install pypdf==6.21.2
+          python -m pip install pypdf==6.21.4
           python -m tests.fixtures.generator --out tests/fixtures/generated
           # The Playwright container writes state; the worker reads as uid 10001.
           chmod -R a+rwX tests/fixtures/generated
diff --git a/docs/DEPLOY.md b/docs/DEPLOY.md
index 900ba31..4a0c332 100644
--- a/docs/DEPLOY.md
+++ b/docs/DEPLOY.md
@@ -285,7 +285,7 @@ The real PESCO domain controllers are never used by CI. The test and production
 CI never reads VISUAL or M-Files. `deploy/ci/ci.env` sets `FEED_SOURCE=fixture`, `DRAWING_SOURCE=fixture` and `FIXTURE_DIR=/fixtures`. The image does not contain `tests/`, so the e2e job generates the fixtures on the runner before the stack starts:
 
 ```bash
-python -m pip install pypdf==6.21.2
+python -m pip install pypdf==6.21.4
 python -m tests.fixtures.generator --out tests/fixtures/generated
 ```
 
diff --git a/pyproject.toml b/pyproject.toml
index 42982a2..f81a662 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -22,7 +22,7 @@ dependencies = [
     "apscheduler>=3.11,<4",
     "httpx>=0.28",
     "tzdata>=2026.5",
-    "pypdf==6.21.2",
+    "pypdf==6.21.4",
     "python-multipart==0.0.32",
     "pypdfium2==5.14.0",
     "openpyxl==3.1.5",
diff --git a/server/requirements.txt b/server/requirements.txt
index 00ce576..290bee4 100644
--- a/server/requirements.txt
+++ b/server/requirements.txt
@@ -15,7 +15,7 @@ argon2-cffi==25.1.0
 apscheduler==3.11.3
 httpx==0.28.1
 tzdata==2026.5
-pypdf==6.21.2
+pypdf==6.21.4
 python-multipart==0.0.32
 pypdfium2==5.14.0
 openpyxl==3.1.5
@@ -31,7 +31,7 @@ annotated-doc==0.0.5
 annotated-types==0.8.0
 anyio==4.15.1
 argon2-cffi-bindings==26.1.0
-certifi==2026.10.19
+certifi==2026.10.23
 cffi==2.1.1
 charset-normalizer==3.5.2
 click==8.5.0
@@ -50,7 +50,7 @@ more-itertools==11.2.1
 opentelemetry-api==1.45.1
 psycopg-binary==3.3.6
 psycopg-pool==3.3.3
-pyasn1==0.6.4
+pyasn1==0.6.5
 pycparser==3.11
 pydantic-core==2.50.1
 python-dotenv==1.2.4