diff --git a/versions.lock b/versions.lock
index caeb0d6..9983ffa 100644
--- a/versions.lock
+++ b/versions.lock
@@ -43,7 +43,7 @@ com.palantir.tracing:tracing:6.15.0 (1 constraints: 7910aaae)
 com.palantir.tracing:tracing-api:6.15.0 (2 constraints: 4c1dba1f)
 com.palantir.tracing:tracing-undertow:6.15.0 (1 constraints: 65177437)
 com.squareup:javapoet:1.13.0 (1 constraints: 3705323b)
-io.undertow:undertow-core:2.3.3.Final (3 constraints: 952f510e)
+io.undertow:undertow-core:2.3.4.Final (3 constraints: 962fcb0e)
 jakarta.annotation:jakarta.annotation-api:1.3.5 (1 constraints: f10f7399)
 jakarta.ws.rs:jakarta.ws.rs-api:2.1.6 (1 constraints: f10f7399)
 joda-time:joda-time:2.10.8 (1 constraints: 2e16acf1)
diff --git a/versions.props b/versions.props
index 6b2b243..c1e46f9 100644
--- a/versions.props
+++ b/versions.props
@@ -10,7 +10,7 @@ com.markelliot.barista.tracing:barista-tracing = 0.32.0
 com.markelliot.result:result = 0.32.0
 com.palantir.conjure.java:* = 6.69.0
 com.squareup:javapoet = 1.13.0
-io.undertow:undertow-core = 2.3.3.Final
+io.undertow:undertow-core = 2.3.4.Final
 org.apache.logging.log4j:* = 2.19.0
 org.assertj:assertj-core = 3.24.2
 org.junit:junit-bom = 5.9.2