diff --git a/Dockerfile b/Dockerfile
index 7d198ff1d9..6ab78d85e3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -50,6 +50,9 @@ USER root
 # Install runtime dependencies
 RUN apk add --no-cache openssl tzdata
 
+# Upgrade pip to fix CVE-2025-8869
+RUN pip install --upgrade pip>=24.3.1
+
 WORKDIR /app
 # Copy the current directory contents into the container at /app
 COPY . .
diff --git a/requirements.txt b/requirements.txt
index 3ae83c563e..8e70e7a574 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -41,7 +41,7 @@ opentelemetry-sdk==1.25.0
 opentelemetry-exporter-otlp==1.25.0
 sentry_sdk==2.21.0 # for sentry error handling
 detect-secrets==1.5.0 # Enterprise - secret detection / masking in LLM requests
-cryptography==43.0.1
+cryptography==44.0.1
 tzdata==2025.1 # IANA time zone database
 litellm-proxy-extras==0.2.21 # for proxy extras - e.g. prisma migrations
 ### LITELLM PACKAGE DEPENDENCIES