diff --git a/versions.lock b/versions.lock
index e677157..7a66de7 100644
--- a/versions.lock
+++ b/versions.lock
@@ -44,7 +44,7 @@ com.palantir.tritium:tritium-ids:0.88.0 (1 constraints: d30fb896)
 com.palantir.tritium:tritium-registry:0.88.0 (1 constraints: 861cb8a4)
 com.squareup:javapoet:1.13.0 (1 constraints: 3705323b)
 io.dropwizard.metrics:metrics-core:4.2.25 (2 constraints: 492d3297)
-io.undertow:undertow-core:2.3.14.Final (4 constraints: 3d491a6f)
+io.undertow:undertow-core:2.3.15.Final (4 constraints: 3e49db6f)
 joda-time:joda-time:2.10.14 (1 constraints: 5b160f08)
 org.apache.logging.log4j:log4j-api:2.23.1 (3 constraints: 1c2e0d3c)
 org.apache.logging.log4j:log4j-core:2.23.1 (2 constraints: 3f16373a)
diff --git a/versions.props b/versions.props
index ec89dce..e03caf8 100644
--- a/versions.props
+++ b/versions.props
@@ -10,7 +10,7 @@ com.markelliot.barista.tracing:barista-tracing = 0.74.0
 com.markelliot.result:result = 0.75.0
 com.palantir.conjure.java:* = 8.23.0
 com.squareup:javapoet = 1.13.0
-io.undertow:undertow-core = 2.3.14.Final
+io.undertow:undertow-core = 2.3.15.Final
 org.apache.logging.log4j:* = 2.23.1
 org.assertj:assertj-core = 3.26.3
 org.junit:junit-bom = 5.11.0-M2