diff --git a/requirements/edx/semgrep.txt b/requirements/edx/semgrep.txt
index 95f08ca390..fa52cb875f 100644
--- a/requirements/edx/semgrep.txt
+++ b/requirements/edx/semgrep.txt
@@ -17,7 +17,7 @@ boltons==21.0.0
     #   semgrep
 bracex==2.5.post1
     # via wcmatch
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 charset-normalizer==2.0.12
     # via
diff --git a/scripts/user_retirement/requirements/base.txt b/scripts/user_retirement/requirements/base.txt
index 04bcd93acd..9a66a15dee 100644
--- a/scripts/user_retirement/requirements/base.txt
+++ b/scripts/user_retirement/requirements/base.txt
@@ -18,7 +18,7 @@ botocore==1.37.38
     #   s3transfer
 cachetools==5.5.2
     # via google-auth
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 cffi==1.17.1
     # via
diff --git a/scripts/user_retirement/requirements/testing.txt b/scripts/user_retirement/requirements/testing.txt
index a6a35fc9d0..1ec1c78600 100644
--- a/scripts/user_retirement/requirements/testing.txt
+++ b/scripts/user_retirement/requirements/testing.txt
@@ -28,7 +28,7 @@ cachetools==5.5.2
     # via
     #   -r scripts/user_retirement/requirements/base.txt
     #   google-auth
-certifi==2025.1.31
+certifi==2025.4.26
     # via
     #   -r scripts/user_retirement/requirements/base.txt
     #   requests
diff --git a/scripts/xblock/requirements.txt b/scripts/xblock/requirements.txt
index d015b6c1bd..5a5b39827e 100644
--- a/scripts/xblock/requirements.txt
+++ b/scripts/xblock/requirements.txt
@@ -4,7 +4,7 @@
 #
 #    make upgrade
 #
-certifi==2025.1.31
+certifi==2025.4.26
     # via requests
 charset-normalizer==2.0.12
     # via