diff --git a/homeassistant/package_constraints.txt b/homeassistant/package_constraints.txt
index f7b2ce8561d9a..d85fa4293a31d 100644
--- a/homeassistant/package_constraints.txt
+++ b/homeassistant/package_constraints.txt
@@ -70,7 +70,7 @@ voluptuous-openapi==0.0.5
 voluptuous-serialize==2.6.0
 voluptuous==0.15.2
 webrtc-models==0.3.0
-yarl==1.18.0
+yarl==1.18.3
 zeroconf==0.136.2
 
 # Constrain pycryptodome to avoid vulnerability
diff --git a/pyproject.toml b/pyproject.toml
index ec3fe8024d9db..9aa53920318d0 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -79,7 +79,7 @@ dependencies    = [
     "voluptuous==0.15.2",
     "voluptuous-serialize==2.6.0",
     "voluptuous-openapi==0.0.5",
-    "yarl==1.18.0",
+    "yarl==1.18.3",
     "webrtc-models==0.3.0",
 ]
 
diff --git a/requirements.txt b/requirements.txt
index 0967b9b0618a1..d0e2be91a99e7 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -47,5 +47,5 @@ uv==0.5.4
 voluptuous==0.15.2
 voluptuous-serialize==2.6.0
 voluptuous-openapi==0.0.5
-yarl==1.18.0
+yarl==1.18.3
 webrtc-models==0.3.0