diff --git a/scripts/security-scan.sh b/scripts/security-scan.sh
index 80ede2a81..0fa774319 100755
--- a/scripts/security-scan.sh
+++ b/scripts/security-scan.sh
@@ -20,7 +20,7 @@ echo "🔒 Running local security scan..."
 if ! command -v govulncheck &> /dev/null; then
     echo -e "${YELLOW}Installing govulncheck...${NC}"
     # renovate: datasource=go depName=golang.org/x/vuln
-    go install golang.org/x/vuln/cmd/govulncheck@v1.8.0
+    go install golang.org/x/vuln/cmd/govulncheck@v1.9.0
 fi
 
 # Run govulncheck on backend Go code