diff --git a/samples/bookinfo/src/productpage/requirements.in b/samples/bookinfo/src/productpage/requirements.in
index cabe18eaed96..a7cd103582c8 100644
--- a/samples/bookinfo/src/productpage/requirements.in
+++ b/samples/bookinfo/src/productpage/requirements.in
@@ -14,7 +14,7 @@ opentelemetry-util-http==0.53b1
 prometheus-client==0.21.1
 requests==2.32.3
 simplejson==3.20.1
-urllib3==2.4.0
+urllib3==2.6.0
 gunicorn==23.0.0
 gevent==24.11.1
 setuptools==78.1.0
diff --git a/samples/bookinfo/src/productpage/requirements.txt b/samples/bookinfo/src/productpage/requirements.txt
index d57b2aeb14ad..1143bce10fec 100644
--- a/samples/bookinfo/src/productpage/requirements.txt
+++ b/samples/bookinfo/src/productpage/requirements.txt
@@ -507,9 +507,9 @@ typing-extensions==4.13.2 \
     --hash=sha256:a439e7c04b49fec3e5d3e2beaa21755cadbbdc391694e28ccdd36ca4a1408f8c \
     --hash=sha256:e6c81219bd689f51865d9e372991c540bda33a0379d5573cddb9a3a23f7caaef
     # via opentelemetry-sdk
-urllib3==2.4.0 \
-    --hash=sha256:414bc6535b787febd7567804cc015fee39daab8ad86268f1310a9250697de466 \
-    --hash=sha256:4e16665048960a0900c702d4a66415956a584919c03361cac9f1df5c5dd7e813
+urllib3==2.6.0 \
+    --hash=sha256:c90f7a39f716c572c4e3e58509581ebd83f9b59cced005b7db7ad2d22b0db99f \
+    --hash=sha256:cb9bcef5a4b345d5da5d145dc3e30834f58e8018828cbc724d30b4cb7d4d49f1
     # via
     #   -r requirements.in
     #   requests
diff --git a/samples/bookinfo/src/productpage/test-requirements.txt b/samples/bookinfo/src/productpage/test-requirements.txt
index f1ad8e3b1552..00cf6faeb33d 100644
--- a/samples/bookinfo/src/productpage/test-requirements.txt
+++ b/samples/bookinfo/src/productpage/test-requirements.txt
@@ -116,7 +116,7 @@ six==1.16.0 \
     --hash=sha256:1e61c37477a1626458e36f7b1d82aa5c9b094fa4802892072e49de9c60c4c926 \
     --hash=sha256:8abb2f1d86890a2dfb989f9a77cfcfd3e47c2a354b01111771326f8aa26e0254
     # via requests-mock
-urllib3==2.2.2 \
-    --hash=sha256:a448b2f64d686155468037e1ace9f2d2199776e17f0a46610480d311f73e3472 \
-    --hash=sha256:dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f612168
+urllib3==2.6.0 \
+    --hash=sha256:c90f7a39f716c572c4e3e58509581ebd83f9b59cced005b7db7ad2d22b0db99f \
+    --hash=sha256:cb9bcef5a4b345d5da5d145dc3e30834f58e8018828cbc724d30b4cb7d4d49f1
     # via requests