diff --git a/api/package.json b/api/package.json
index 4f77d570..32cb7820 100644
--- a/api/package.json
+++ b/api/package.json
@@ -25,7 +25,7 @@
     "hono": "^4.12.7",
     "http-message-signatures": "^1.0.4",
     "httpbis-digest-headers": "^1.0.0",
-    "zod": "^4.1.13"
+    "zod": "^4.3.6"
   },
   "types": "./src/types.ts",
   "devDependencies": {
diff --git a/frontend/package.json b/frontend/package.json
index 965e25c8..c8a0fa20 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -43,7 +43,7 @@
     "sanitize-html": "^2.17.0",
     "tailwindcss": "^3.4.19",
     "valtio": "^2.3.1",
-    "zod": "^4.1.13"
+    "zod": "^4.3.6"
   },
   "devDependencies": {
     "@cloudflare/vite-plugin": "^1.17.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2b0f2d13..a7a3c85a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -50,7 +50,7 @@ importers:
     dependencies:
       '@hono/zod-validator':
         specifier: ^0.7.6
-        version: 0.7.6(hono@4.12.7)(zod@4.1.13)
+        version: 0.7.6(hono@4.12.7)(zod@4.3.6)
       '@interledger/open-payments':
         specifier: ^7.4.0
         version: 7.4.0
@@ -82,8 +82,8 @@ importers:
         specifier: ^1.0.0
         version: 1.0.0
       zod:
-        specifier: ^4.1.13
-        version: 4.1.13
+        specifier: ^4.3.6
+        version: 4.3.6
     devDependencies:
       '@cloudflare/workers-types':
         specifier: ^4.20251011.0
@@ -255,8 +255,8 @@ importers:
         specifier: ^2.3.1
         version: 2.3.1(@types/react@19.2.7)(react@19.2.1)
       zod:
-        specifier: ^4.1.13
-        version: 4.1.13
+        specifier: ^4.3.6
+        version: 4.3.6
     devDependencies:
       '@cloudflare/vite-plugin':
         specifier: ^1.17.1
@@ -4370,8 +4370,8 @@ packages:
   zod@3.25.76:
     resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
 
-  zod@4.1.13:
-    resolution: {integrity: sha512-AvvthqfqrAhNH9dnfmrfKzX5upOdjUVJYFqNSlkmGf64gRaTzlPwz99IHYnVs28qYAybvAlBV+H7pn0saFY4Ig==}
+  zod@4.3.6:
+    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
 
 snapshots:
 
@@ -4847,10 +4847,10 @@ snapshots:
 
   '@fontsource/titillium-web@5.2.8': {}
 
-  '@hono/zod-validator@0.7.6(hono@4.12.7)(zod@4.1.13)':
+  '@hono/zod-validator@0.7.6(hono@4.12.7)(zod@4.3.6)':
     dependencies:
       hono: 4.12.7
-      zod: 4.1.13
+      zod: 4.3.6
 
   '@humanfs/core@0.19.1': {}
 
@@ -8616,4 +8616,4 @@ snapshots:
 
   zod@3.25.76: {}
 
-  zod@4.1.13: {}
+  zod@4.3.6: {}