diff --git a/requirements/common.in b/requirements/common.in
index 59434e4b32e..d725197e433 100644
--- a/requirements/common.in
+++ b/requirements/common.in
@@ -12,7 +12,7 @@ psycopg2-binary==2.9.9
 
 jsonschema==4.23.0  # import jsonschema
 djangorestframework==3.15.2  # Imported as rest_framework
-django-cors-headers==4.4.0  # Listed as 3rd party app on settings.py
+django-cors-headers==4.5.0  # Listed as 3rd party app on settings.py
 mozlog==8.0.0
 
 # Used directly and also by Django's YAML serializer.
diff --git a/requirements/common.txt b/requirements/common.txt
index 5f8667a1014..31b56356ebe 100644
--- a/requirements/common.txt
+++ b/requirements/common.txt
@@ -372,9 +372,9 @@ django-cache-memoize==0.2.0 \
     --hash=sha256:79950a027ba40e4aff4efed587b76036bf5ba1f59329d7b158797b832be72ca6 \
     --hash=sha256:a6bfd112da699d1fa85955a1e15b7c48ee25e58044398958e269678db10736f3
     # via -r requirements/common.in
-django-cors-headers==4.4.0 \
-    --hash=sha256:5c6e3b7fe870876a1efdfeb4f433782c3524078fa0dc9e0195f6706ce7a242f6 \
-    --hash=sha256:92cf4633e22af67a230a1456cb1b7a02bb213d6536d2dcb2a4a24092ea9cebc2
+django-cors-headers==4.5.0 \
+    --hash=sha256:28c1ded847aa70208798de3e42422a782f427b8b720e8d7319d34b654b5978e6 \
+    --hash=sha256:6c01a85cf1ec779a7bde621db853aa3ce5c065a5ba8e27df7a9f9e8dac310f4f
     # via -r requirements/common.in
 django-environ==0.11.2 \
     --hash=sha256:0ff95ab4344bfeff693836aa978e6840abef2e2f1145adff7735892711590c05 \