diff --git a/backend/pyproject.toml b/backend/pyproject.toml
index 18423c91..646603d4 100644
--- a/backend/pyproject.toml
+++ b/backend/pyproject.toml
@@ -30,7 +30,7 @@ dependencies = [
   "pycognito~=2024.5.0",
   "pydantic[email]~=2.13.0",
   "pymysql~=1.1.0",
-  "pypdf~=6.11.0",
+  "pypdf~=6.12.0",
   "reportlab~=4.5.0",
   "requests~=2.33.0",
   "sentry-sdk[django]~=2.59.0",
diff --git a/backend/uv.lock b/backend/uv.lock
index 1b1e8979..e023349e 100644
--- a/backend/uv.lock
+++ b/backend/uv.lock
@@ -1055,11 +1055,11 @@ wheels = [
 
 [[package]]
 name = "pypdf"
-version = "6.11.0"
+version = "6.12.0"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/bf/58/6dd97d78a4b17a7a6b9d1c6ad23895abc41f0fdc49c553cc05bdfdcc36d0/pypdf-6.11.0.tar.gz", hash = "sha256:062b51c81b0910e6d2755e99e1c5547a0a23b7d0a32322af66240d8edcfabe87", size = 6453975, upload-time = "2026-05-09T13:26:48.955Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/a2/ba/f82d1cb35b04041b5f796d4eedbaecafcbf99e83b7a2542b44a936959dd7/pypdf-6.12.0.tar.gz", hash = "sha256:061f135db8934503ed301c2d4cfaccb12f0a2ef1db11c5d0768a72a5ab4097d8", size = 6466074, upload-time = "2026-05-21T09:21:42.621Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/07/b1/68feb7eb3b99f0c020b414234825f4a5d70e0126c18d933770e8c93a35fc/pypdf-6.11.0-py3-none-any.whl", hash = "sha256:769394d5756d5b304c9b6bef88b54b1816b328e7e6fc9254e625529a15ed4ab8", size = 338819, upload-time = "2026-05-09T13:26:46.904Z" },
+    { url = "https://files.pythonhosted.org/packages/f4/fa/3597fb3fb28f40bf8291fdddbc4dcd51ce52fccaf1cbfca10ee9db09c69a/pypdf-6.12.0-py3-none-any.whl", hash = "sha256:a8e104ab950e655d0bcf5fa5e71317c06474bc707987335da44a210f73a8883b", size = 343457, upload-time = "2026-05-21T09:21:40.852Z" },
 ]
 
 [[package]]
@@ -1282,7 +1282,7 @@ requires-dist = [
     { name = "pycognito", specifier = "~=2024.5.0" },
     { name = "pydantic", extras = ["email"], specifier = "~=2.13.0" },
     { name = "pymysql", specifier = "~=1.1.0" },
-    { name = "pypdf", specifier = "~=6.11.0" },
+    { name = "pypdf", specifier = "~=6.12.0" },
     { name = "reportlab", specifier = "~=4.5.0" },
     { name = "requests", specifier = "~=2.33.0" },
     { name = "sentry-sdk", extras = ["django"], specifier = "~=2.59.0" },