diff --git a/versions.lock b/versions.lock
index f092d4dbc..132b4db2b 100644
--- a/versions.lock
+++ b/versions.lock
@@ -142,7 +142,7 @@ io.smallrye.common:smallrye-common-os:2.4.0 (1 constraints: b10e835a)
 
 io.smallrye.common:smallrye-common-ref:2.4.0 (1 constraints: b10e835a)
 
-io.undertow:undertow-core:2.2.38.Final (2 constraints: ea19a2fe)
+io.undertow:undertow-core:2.2.40.Final (2 constraints: e319fffc)
 
 jakarta.annotation:jakarta.annotation-api:2.1.1 (6 constraints: cd5ca708)
 
diff --git a/versions.props b/versions.props
index d9f7b6984..d47f8c291 100644
--- a/versions.props
+++ b/versions.props
@@ -22,7 +22,7 @@ com.palantir.syntactic-paths:syntactic-paths = 0.20.0
 com.palantir.tokens:* = 4.8.0
 com.palantir.tracing:* = 6.38.0
 info.picocli:picocli = 4.7.7
-io.undertow:* = 2.2.38.Final
+io.undertow:* = 2.2.40.Final
 joda-time:joda-time = 2.14.3
 org.apache.commons:commons-lang3 = 3.20.0
 org.assertj:* = 3.27.7