diff --git a/src/SetlistStudio.Web/SetlistStudio.Web.csproj b/src/SetlistStudio.Web/SetlistStudio.Web.csproj
index fa7656d..f3b2eb9 100644
--- a/src/SetlistStudio.Web/SetlistStudio.Web.csproj
+++ b/src/SetlistStudio.Web/SetlistStudio.Web.csproj
@@ -37,7 +37,7 @@
     <PackageReference Include="Microsoft.AspNetCore.SignalR.StackExchangeRedis" Version="8.0.11" />
     <PackageReference Include="StackExchange.Redis" Version="2.8.16" />
     <!-- Security fix: Force MessagePack to secure version (CVE-2024-48924) -->
-    <PackageReference Include="MessagePack" Version="2.5.187" />
+    <PackageReference Include="MessagePack" Version="3.1.4" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/SetlistStudio.Tests/SetlistStudio.Tests.csproj b/tests/SetlistStudio.Tests/SetlistStudio.Tests.csproj
index 4c1512d..7cc8696 100644
--- a/tests/SetlistStudio.Tests/SetlistStudio.Tests.csproj
+++ b/tests/SetlistStudio.Tests/SetlistStudio.Tests.csproj
@@ -56,7 +56,7 @@
 
   <ItemGroup>
     <!-- Security fix: Force MessagePack to secure version (CVE-2024-48924) -->
-    <PackageReference Include="MessagePack" Version="2.5.187" />
+    <PackageReference Include="MessagePack" Version="3.1.4" />
   </ItemGroup>
 
 </Project>
\ No newline at end of file