diff --git a/src/TrainLoop.Api/TrainLoop.Api.csproj b/src/TrainLoop.Api/TrainLoop.Api.csproj
index f1205a1..dd7709f 100644
--- a/src/TrainLoop.Api/TrainLoop.Api.csproj
+++ b/src/TrainLoop.Api/TrainLoop.Api.csproj
@@ -20,7 +20,7 @@
          release compatible with Microsoft.OpenApi 3.x is 11.0.0-preview+ (net11.0, requires
          .NET 11 preview SDK/runtime) — revisit this pin when .NET 11 GA ships a stable
          release with matching Microsoft.OpenApi 3.x support. -->
-    <PackageReference Include="Microsoft.OpenApi" Version="2.12.0" />
+    <PackageReference Include="Microsoft.OpenApi" Version="2.12.2" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj
index 35e3215..13e2ba0 100644
--- a/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj
+++ b/tests/TrainLoop.Api.Tests/TrainLoop.Api.Tests.csproj
@@ -11,7 +11,7 @@
     <PackageReference Include="coverlet.collector" Version="10.0.1" />
     <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.9.0" />
     <!-- Pinned to match TrainLoop.Api.csproj — see comment there for why 3.x is unsafe. -->
-    <PackageReference Include="Microsoft.OpenApi" Version="2.12.0" />
+    <PackageReference Include="Microsoft.OpenApi" Version="2.12.2" />
     <PackageReference Include="xunit" Version="2.9.3" />
     <PackageReference Include="xunit.runner.visualstudio" Version="4.0.0" />
   </ItemGroup>