diff --git a/cli_bundle/requirements.txt b/cli_bundle/requirements.txt
index 2ac9385b..df29659f 100644
--- a/cli_bundle/requirements.txt
+++ b/cli_bundle/requirements.txt
@@ -3,7 +3,7 @@ click==8.3.0
 rich==14.1.0
 pyyaml==6.0.2
 requests==2.32.5  # fixed .netrc credential leak (CVE-2024-35195)
-pandas==2.3.2
+pandas==2.3.3
 numpy==2.2.6
 
 # Reuse the repo-wide requirements; add CLI-only extras here if you need.
diff --git a/docker/requirements.txt b/docker/requirements.txt
index 2c6a3757..f3f04ecc 100644
--- a/docker/requirements.txt
+++ b/docker/requirements.txt
@@ -3,7 +3,7 @@ click==8.3.0
 rich==14.1.0
 pyyaml==6.0.2
 requests==2.32.5  # fixed .netrc credential leak (CVE-2024-35195)
-pandas==2.3.2
+pandas==2.3.3
 numpy==2.2.6
 
 # Optional — enable as needed (uncomment to use)