diff --git a/versions.lock b/versions.lock
index b9a5d6537..b17364f1f 100644
--- a/versions.lock
+++ b/versions.lock
@@ -142,7 +142,7 @@ io.smallrye.common:smallrye-common-os:2.4.0 (1 constraints: b10e835a)
 
 io.smallrye.common:smallrye-common-ref:2.4.0 (1 constraints: b10e835a)
 
-io.undertow:undertow-core:2.2.38.Final (2 constraints: ea19a2fe)
+io.undertow:undertow-core:2.2.39.Final (2 constraints: eb19defe)
 
 jakarta.annotation:jakarta.annotation-api:2.1.1 (6 constraints: cd5ca708)
 
diff --git a/versions.props b/versions.props
index 77dc626b6..5ebe610c6 100644
--- a/versions.props
+++ b/versions.props
@@ -22,7 +22,7 @@ com.palantir.syntactic-paths:syntactic-paths = 0.14.0
 com.palantir.tokens:* = 4.0.0
 com.palantir.tracing:* = 6.32.0
 info.picocli:picocli = 4.7.7
-io.undertow:* = 2.2.38.Final
+io.undertow:* = 2.2.39.Final
 joda-time:joda-time = 2.14.1
 org.apache.commons:commons-lang3 = 3.20.0
 org.assertj:* = 3.27.7