diff --git a/poetry.lock b/poetry.lock
index 762ceeb..fcf32cf 100644
--- a/poetry.lock
+++ b/poetry.lock
@@ -802,4 +802,4 @@ type = ["pytest-mypy"]
 [metadata]
 lock-version = "2.0"
 python-versions = ">=3.10,<4.0"
-content-hash = "26bb2b4b14a584d19feaabbe71d5edc4736af4bb97de5525e9c28c69d58e81e3"
+content-hash = "4e0e8980184a5df15cb6770c77d138080817b32121dc0d3b0d96baa62a7b8946"
diff --git a/pyproject.toml b/pyproject.toml
index 9611cff..4aa0159 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -15,7 +15,7 @@ python = ">=3.10,<4.0"
 urllib3 = ">=2.7.0,<3.0.0" # pinned to patch urllib3 cves (CVE-2026-44431, CVE-2026-44432)
 botocore = "^1.38"
 boto3 = "^1.38"
-pydantic = ">=1.8.1,<3"
+pydantic = ">=1.8.2,<3" # 1.8.2 minimum to patch pydantic CVE (CVE-2021-29510)
 prometheus-api-client = "^0.7.0"
 zipp = "^3.20.1" # added to Pin transitive dependency, not needed directly
 idna = "^3.7"