diff --git a/packages/web-app-app-store/package.json b/packages/web-app-app-store/package.json
index 31029fc49b7..081d5ef8b68 100644
--- a/packages/web-app-app-store/package.json
+++ b/packages/web-app-app-store/package.json
@@ -21,7 +21,7 @@
     "pinia": "3.0.4",
     "vue-concurrency": "5.0.3",
     "vue-router": "4.6.4",
-    "zod": "4.2.1",
+    "zod": "4.3.5",
     "vue3-gettext": "2.4.0"
   }
 }
diff --git a/packages/web-app-external/package.json b/packages/web-app-external/package.json
index efde6345f53..30f2abf124b 100644
--- a/packages/web-app-external/package.json
+++ b/packages/web-app-external/package.json
@@ -20,6 +20,6 @@
     "vue-concurrency": "5.0.3",
     "vue3-gettext": "2.4.0",
     "vue-router": "4.6.4",
-    "zod": "4.2.1"
+    "zod": "4.3.5"
   }
 }
diff --git a/packages/web-app-ocm/package.json b/packages/web-app-ocm/package.json
index e6fb320c852..49b5fc9dc8c 100644
--- a/packages/web-app-ocm/package.json
+++ b/packages/web-app-ocm/package.json
@@ -14,6 +14,6 @@
     "vue-concurrency": "5.0.3",
     "uuid": "13.0.0",
     "vue-router": "4.6.4",
-    "zod": "4.2.1"
+    "zod": "4.3.5"
   }
 }
diff --git a/packages/web-client/package.json b/packages/web-client/package.json
index f7ef914cf5e..3e348435ccb 100644
--- a/packages/web-client/package.json
+++ b/packages/web-client/package.json
@@ -91,7 +91,7 @@
     "uuid": "^13.0.0",
     "webdav": "^5.8.0",
     "xml-js": "^1.6.11",
-    "zod": "^4.2.1"
+    "zod": "^4.3.5"
   },
   "devDependencies": {
     "@types/luxon": "3.7.1",
diff --git a/packages/web-pkg/package.json b/packages/web-pkg/package.json
index 65572b9653f..8363d59c40b 100644
--- a/packages/web-pkg/package.json
+++ b/packages/web-pkg/package.json
@@ -80,7 +80,7 @@
     "vue-concurrency": "^5.0.3",
     "vue-router": "^4.6.4",
     "vue3-gettext": "^2.4.0",
-    "zod": "^4.2.1"
+    "zod": "^4.3.5"
   },
   "devDependencies": {
     "@ownclouders/web-test-helpers": "workspace:^",
diff --git a/packages/web-runtime/package.json b/packages/web-runtime/package.json
index 1ff44e6db53..3a7ac5bcfd7 100644
--- a/packages/web-runtime/package.json
+++ b/packages/web-runtime/package.json
@@ -46,7 +46,7 @@
     "vue3-gettext": "2.4.0",
     "webdav": "5.8.0",
     "xml-js": "^1.6.11",
-    "zod": "4.2.1"
+    "zod": "4.3.5"
   },
   "devDependencies": {
     "@ownclouders/web-test-helpers": "workspace:*"
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index fcb45231344..970c310458c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -553,8 +553,8 @@ importers:
         specifier: 2.4.0
         version: 2.4.0(patch_hash=6f231bbef273efbc788b5657c47fc744b52bc838f972357a764c144fde6065f2)(@vue/compiler-sfc@3.5.25)(vue@3.5.25(typescript@5.9.3))
       zod:
-        specifier: 4.2.1
-        version: 4.2.1
+        specifier: 4.3.5
+        version: 4.3.5
     devDependencies:
       '@ownclouders/web-test-helpers':
         specifier: workspace:*
@@ -609,8 +609,8 @@ importers:
         specifier: 2.4.0
         version: 2.4.0(patch_hash=6f231bbef273efbc788b5657c47fc744b52bc838f972357a764c144fde6065f2)(@vue/compiler-sfc@3.5.25)(vue@3.5.25(typescript@5.9.3))
       zod:
-        specifier: 4.2.1
-        version: 4.2.1
+        specifier: 4.3.5
+        version: 4.3.5
     devDependencies:
       '@ownclouders/web-test-helpers':
         specifier: workspace:*
@@ -713,8 +713,8 @@ importers:
         specifier: 4.6.4
         version: 4.6.4(vue@3.5.25(typescript@5.9.3))
       zod:
-        specifier: 4.2.1
-        version: 4.2.1
+        specifier: 4.3.5
+        version: 4.3.5
 
   packages/web-app-password-protected-folders:
     devDependencies:
@@ -880,8 +880,8 @@ importers:
         specifier: ^1.6.11
         version: 1.6.11
       zod:
-        specifier: ^4.2.1
-        version: 4.2.1
+        specifier: ^4.3.5
+        version: 4.3.5
     devDependencies:
       '@types/luxon':
         specifier: 3.7.1
@@ -1041,8 +1041,8 @@ importers:
         specifier: ^2.4.0
         version: 2.4.0(patch_hash=6f231bbef273efbc788b5657c47fc744b52bc838f972357a764c144fde6065f2)(@vue/compiler-sfc@3.5.25)(vue@3.5.25(typescript@5.9.3))
       zod:
-        specifier: ^4.2.1
-        version: 4.2.1
+        specifier: ^4.3.5
+        version: 4.3.5
     devDependencies:
       '@ownclouders/web-test-helpers':
         specifier: workspace:^
@@ -1184,8 +1184,8 @@ importers:
         specifier: ^1.6.11
         version: 1.6.11
       zod:
-        specifier: 4.2.1
-        version: 4.2.1
+        specifier: 4.3.5
+        version: 4.3.5
     devDependencies:
       '@ownclouders/web-test-helpers':
         specifier: workspace:*
@@ -7286,8 +7286,8 @@ packages:
   zhead@2.2.4:
     resolution: {integrity: sha512-8F0OI5dpWIA5IGG5NHUg9staDwz/ZPxZtvGVf01j7vHqSyZ0raHY+78atOVxRqb73AotX22uV1pXt3gYSstGag==}
 
-  zod@4.2.1:
-    resolution: {integrity: sha512-0wZ1IRqGGhMP76gLqz8EyfBXKk0J2qo2+H3fi4mcUP/KtTocoX08nmIAHl1Z2kJIZbZee8KOpBCSNPRgauucjw==}
+  zod@4.3.5:
+    resolution: {integrity: sha512-k7Nwx6vuWx1IJ9Bjuf4Zt1PEllcwe7cls3VNzm4CQ1/hgtFUK2bRNG3rvnpPUhFjmqJKAKtjV576KnUkHocg/g==}
 
 snapshots:
 
@@ -14025,4 +14025,4 @@ snapshots:
 
   zhead@2.2.4: {}
 
-  zod@4.2.1: {}
+  zod@4.3.5: {}