diff --git a/go.mod b/go.mod
index a33281fd..ce78ea4f 100644
--- a/go.mod
+++ b/go.mod
@@ -3,7 +3,7 @@ module github.com/cilium/certgen
 go 1.27.0
 
 require (
-	github.com/cloudflare/cfssl v1.7.0
+	github.com/cloudflare/cfssl v1.7.1
 	github.com/spf13/cobra v1.10.2
 	github.com/spf13/viper v1.21.0
 	github.com/stretchr/testify v1.12.1
diff --git a/go.sum b/go.sum
index e320bb49..141e4b50 100644
--- a/go.sum
+++ b/go.sum
@@ -1,6 +1,6 @@
 filippo.io/edwards25519 v1.1.0/go.mod h1:BxyFTGdWcka3PhytdK4V28tE5sGfRvvvRV7EaN4VDT4=
-github.com/cloudflare/cfssl v1.7.0 h1:ZHKw+FhbqRbnVrgYIq9mKsZu6uglwJdWQxUoWhWSiIk=
-github.com/cloudflare/cfssl v1.7.0/go.mod h1:WLpD4XaYgn44qgQ4W+tvGJEr59/snfQn6LwUrXloxx0=
+github.com/cloudflare/cfssl v1.7.1 h1:nMC84ouypIM/AXrrY24ql70cEtkelfxq4NZ67Ur8pG8=
+github.com/cloudflare/cfssl v1.7.1/go.mod h1:WLpD4XaYgn44qgQ4W+tvGJEr59/snfQn6LwUrXloxx0=
 github.com/cpuguy83/go-md2man/v2 v2.0.6/go.mod h1:oOW0eioCTA6cOiMLiUPZOpcVxMig6NIQQ7OS05n1F4g=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
diff --git a/vendor/modules.txt b/vendor/modules.txt
index f2333cdc..6c4f6fb2 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -1,4 +1,4 @@
-# github.com/cloudflare/cfssl v1.7.0
+# github.com/cloudflare/cfssl v1.7.1
 ## explicit; go 1.27
 github.com/cloudflare/cfssl/api
 github.com/cloudflare/cfssl/api/client