diff --git a/go/ql/test/experimental/CWE-918/go.mod b/go/ql/test/experimental/CWE-918/go.mod
index 8539a853b0e3..336a3fa23f7c 100644
--- a/go/ql/test/experimental/CWE-918/go.mod
+++ b/go/ql/test/experimental/CWE-918/go.mod
@@ -33,7 +33,7 @@ require (
 	github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
 	github.com/ugorji/go/codec v1.2.11 // indirect
 	golang.org/x/arch v0.3.0 // indirect
-	golang.org/x/crypto v0.51.0 // indirect
+	golang.org/x/crypto v0.52.0 // indirect
 	golang.org/x/sys v0.45.0 // indirect
 	golang.org/x/text v0.37.0 // indirect
 	google.golang.org/protobuf v1.30.0 // indirect
diff --git a/go/ql/test/experimental/CWE-918/vendor/modules.txt b/go/ql/test/experimental/CWE-918/vendor/modules.txt
index 70d2275008f4..24402545da81 100644
--- a/go/ql/test/experimental/CWE-918/vendor/modules.txt
+++ b/go/ql/test/experimental/CWE-918/vendor/modules.txt
@@ -129,7 +129,7 @@ github.com/ugorji/go/codec
 # golang.org/x/arch v0.3.0
 ## explicit; go 1.17
 golang.org/x/arch/x86/x86asm
-# golang.org/x/crypto v0.51.0
+# golang.org/x/crypto v0.52.0
 ## explicit; go 1.25.0
 golang.org/x/crypto/sha3
 # golang.org/x/net v0.55.0