diff --git a/src/WidgetWorks.WebApi/WidgetWorks.WebApi.csproj b/src/WidgetWorks.WebApi/WidgetWorks.WebApi.csproj
index f278d10..1ea04c9 100644
--- a/src/WidgetWorks.WebApi/WidgetWorks.WebApi.csproj
+++ b/src/WidgetWorks.WebApi/WidgetWorks.WebApi.csproj
@@ -17,7 +17,7 @@
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.0" />
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.0" />
     <!-- Override transitive Microsoft.OpenApi 2.0.0 (GHSA-v5pm-xwqc-g5wc) with the patched 2.7.5. -->
-    <PackageReference Include="Microsoft.OpenApi" Version="2.7.5" />
+    <PackageReference Include="Microsoft.OpenApi" Version="3.9.0" />
     <PackageReference Include="Scalar.AspNetCore" Version="2.11.3" />
   </ItemGroup>