diff --git a/requirements.txt b/requirements.txt
index d8f73c5..9de4d3f 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,7 +1,7 @@
 bandit==1.7.0
 flake8==3.9.0
 gitdb==4.0.7
-GitPython==3.1.17
+GitPython==3.1.37
 mccabe==0.6.1
 pathspec==0.8.1
 pbr==5.6.0
diff --git a/requirements.unexpanded.txt b/requirements.unexpanded.txt
index fa1004a..e39b4f1 100644
--- a/requirements.unexpanded.txt
+++ b/requirements.unexpanded.txt
@@ -16,9 +16,9 @@ gitdb==4.0.7 \
     --hash=sha256:6c4cc71933456991da20917998acbe6cf4fb41eeaab7d6d67fbc05ecd4c865b0 \
     --hash=sha256:96bf5c08b157a666fec41129e6d327235284cca4c81e92109260f353ba138005
     # via gitpython
-gitpython==3.1.17 \
-    --hash=sha256:29fe82050709760081f588dd50ce83504feddbebdc4da6956d02351552b1c135 \
-    --hash=sha256:ee24bdc93dce357630764db659edaf6b8d664d4ff5447ccfeedd2dc5c253f41e
+gitpython==3.1.37 \
+    --hash=sha256:5f4c4187de49616d710a77e98ddf17b4782060a1788df441846bddefbb89ab33 \
+    --hash=sha256:f9b9ddc0761c125d5780eab2d64be4873fc6817c2899cbcb34b02344bdc7bc54
     # via bandit
 mccabe==0.6.1 \
     --hash=sha256:ab8a6258860da4b6677da4bd2fe5dc2c659cff31b3ee4f7f5d64e79735b80d42 \