diff --git a/requirements-ci.txt b/requirements-ci.txt
index b7717cf..2ff351f 100644
--- a/requirements-ci.txt
+++ b/requirements-ci.txt
@@ -18,7 +18,7 @@ cbor2>=5.4.0
 # REST API dependencies
 fastapi>=0.109.0
 uvicorn[standard]>=0.27.0
-pydantic>=2.5.0
+pydantic>=2.13.5
 prometheus-client>=0.20.0
 
 # Test-only: starlette's TestClient (used by tests/server/test_rest_api.py)
diff --git a/requirements.txt b/requirements.txt
index 5c713ee..caafcc0 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -36,7 +36,7 @@ cbor2>=5.4.0
 # REST API dependencies
 fastapi>=0.109.0
 uvicorn[standard]>=0.27.0
-pydantic>=2.5.0
+pydantic>=2.13.5
 prometheus-client>=0.20.0
 
 # OPTIONAL: RSWP swap-order signature verification (C3-auth, Part B).