diff --git a/docs/requirements-docs.in b/docs/requirements-docs.in
index 3659ac00..54d19b6d 100644
--- a/docs/requirements-docs.in
+++ b/docs/requirements-docs.in
@@ -4,6 +4,8 @@ mkdocs-redirects==1.2.3
 # GHSA-5xmw-vc9v-4wf2, GHSA-cfh3-3jmp-rvhc, GHSA-pwv6-vv43-88gr,
 # GHSA-r73j-pqj5-w3x7, GHSA-whj4-6x5x-4v2j, GHSA-wjx4-4jcj-g98j (PYSEC-2026-165)
 pillow>=12.3.0
+# GHSA-c3jg-qh8m-j3h2 — transitive via mkdocs-material[imaging]
+cairosvg>=2.9.1
 # PYSEC-2026-2132 (CVE-2026-7246) — transitive via mkdocs
 click>=8.3.3
 # GHSA-9xwg-3r6f-jcx2 (CVE-2026-61632) — transitive via mkdocs-material
diff --git a/docs/requirements-docs.txt b/docs/requirements-docs.txt
index c5001381..235a4341 100644
--- a/docs/requirements-docs.txt
+++ b/docs/requirements-docs.txt
@@ -17,10 +17,12 @@ cairocffi==1.7.1 \
     --hash=sha256:2e48ee864884ec4a3a34bfa8c9ab9999f688286eb714a15a43ec9d068c36557b \
     --hash=sha256:9803a0e11f6c962f3b0ae2ec8ba6ae45e957a146a004697a1ac1bbf16b073b3f
     # via cairosvg
-cairosvg==2.9.0 \
-    --hash=sha256:1debb00cd2da11350d8b6f5ceb739f1b539196d71d5cf5eb7363dbd1bfbc8dc5 \
-    --hash=sha256:4b82d07d145377dffdfc19d9791bd5fb65539bb4da0adecf0bdbd9cd4ffd7c68
-    # via mkdocs-material
+cairosvg==2.9.1 \
+    --hash=sha256:861bc28ad97ce4f537d50eb3d6ee97a7afcccec9c61ac25c4e7d073fe409aec7 \
+    --hash=sha256:f91c5628e834be024a0ed4544d76261cd84016a4c73bcdf26c386495825c05a1
+    # via
+    #   -r requirements-docs.in
+    #   mkdocs-material
 certifi==2026.5.20 \
     --hash=sha256:3c52e209ba0a4ad7aebe60436a4ab349c39e1e602e8c134221e546902ad25897 \
     --hash=sha256:69dea482ab64caa7b9f6aba1c6bf48bb6a5448d1c0f1b17ab42ad8c763a5344d