diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 7ece7c46..f9b799b0 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -31,7 +31,7 @@ org-junit-bom = "5.14.4"
 # Soft-pinned to 42.7.10. Bumping to 42.7.11 (which closes CVE-2026-42198, a server-side
 # DoS in SCRAM-SHA-256 auth) breaks :jdbc-core test execution with a NPE.
 # TODO: We need to fix this (but not in the PR that introduced this comment)
-org-postgresql-pgjdbc = "42.7.10"
+org-postgresql-pgjdbc = "42.7.11"
 org-scalatest = "3.2.20"
 org-scalatestplus-junit5 = "3.2.19.0"
 plugin-build-buf = "0.11.0"