diff --git a/constraints.txt b/constraints.txt
index c05e3f015..f37d5a7ea 100644
--- a/constraints.txt
+++ b/constraints.txt
@@ -1,7 +1,7 @@
 #cython<3 # sometimes needed by pyyaml
 PyYAML>=5.4
 attrs # needed by twisted
-cryptography>=43.0.1
+cryptography>=48.0.1
 urllib3>=2.7
 psycopg>=3.1
 packaging>=25.0  # fix for setuptools "License-Files" shenanigans
diff --git a/requirements-django52.txt b/requirements-django52.txt
index f0e8e14e0..33e6eb832 100644
--- a/requirements-django52.txt
+++ b/requirements-django52.txt
@@ -28,7 +28,7 @@ cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.4
     # via requests
-cryptography==46.0.7
+cryptography==48.0.1
     # via
     #   -r constraints.txt
     #   pyjwt
diff --git a/requirements-django60.txt b/requirements-django60.txt
index a85fc9f15..a095cd854 100644
--- a/requirements-django60.txt
+++ b/requirements-django60.txt
@@ -28,7 +28,7 @@ cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.4
     # via requests
-cryptography==46.0.7
+cryptography==48.0.1
     # via
     #   -r constraints.txt
     #   pyjwt
diff --git a/requirements.txt b/requirements.txt
index f0e8e14e0..33e6eb832 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -28,7 +28,7 @@ cffi==2.0.0
     # via cryptography
 charset-normalizer==3.4.4
     # via requests
-cryptography==46.0.7
+cryptography==48.0.1
     # via
     #   -r constraints.txt
     #   pyjwt