diff --git a/poetry.lock b/poetry.lock
index 981df665ec..510322997f 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -1074,17 +1074,18 @@ dev = ["black", "flake8", "therapist", "tox", "twine"]
 
 [[package]]
 name = "django-cors-headers"
-version = "3.14.0"
+version = "4.9.0"
 description = "django-cors-headers is a Django application for handling the server headers required for Cross-Origin Resource Sharing (CORS)."
 optional = false
-python-versions = ">=3.7"
+python-versions = ">=3.9"
 files = [
-    {file = "django_cors_headers-3.14.0-py3-none-any.whl", hash = "sha256:684180013cc7277bdd8702b80a3c5a4b3fcae4abb2bf134dceb9f5dfe300228e"},
-    {file = "django_cors_headers-3.14.0.tar.gz", hash = "sha256:5fbd58a6fb4119d975754b2bc090f35ec160a8373f276612c675b00e8a138739"},
+    {file = "django_cors_headers-4.9.0-py3-none-any.whl", hash = "sha256:15c7f20727f90044dcee2216a9fd7303741a864865f0c3657e28b7056f61b449"},
+    {file = "django_cors_headers-4.9.0.tar.gz", hash = "sha256:fe5d7cb59fdc2c8c646ce84b727ac2bca8912a247e6e68e1fb507372178e59e8"},
 ]
 
 [package.dependencies]
-Django = ">=3.2"
+asgiref = ">=3.6"
+django = ">=4.2"
 
 [[package]]
 name = "django-debug-toolbar"
@@ -4406,4 +4407,4 @@ testing = ["big-O", "jaraco.functools", "jaraco.itertools", "more-itertools", "p
 [metadata]
 lock-version = "2.0"
 python-versions = "3.11.4"
-content-hash = "dccc99fb338ca35929d5ea020e66e1eeca219a5109ec6210a86d07468258aafe"
+content-hash = "e9c22485a46fd138fb68a11fc649eb6a345a7b2ee30d85e947043ee114d6ce08"
diff --git a/pyproject.toml b/pyproject.toml
index d823625bd2..7e0af57e9e 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -49,7 +49,7 @@ Django = "4.2.25"
 django-anymail = {extras = ["mailgun"], version = "^10.0"}
 django-bitfield = "^2.2.0"
 django-cache-memoize = "^0.2.0"
-django-cors-headers = "^3.6.0"
+django-cors-headers = "^4.0.0"
 django-filter = "^2.4.0"
 django-guardian = "^2.4.0"
 django-hijack = "^3.4.1"