diff --git a/k3d.yaml b/k3d.yaml
index 795ecd34a16..3d39ce0e7b8 100644
--- a/k3d.yaml
+++ b/k3d.yaml
@@ -1,7 +1,7 @@
 package:
   name: k3d
   version: "5.8.3"
-  epoch: 18 # CVE-2025-61725
+  epoch: 19 # GHSA-j5w8-q4qc-rx2x
   description: Little helper to run CNCF's k3s in Docker
   copyright:
     - license: MIT
@@ -23,15 +23,21 @@ pipeline:
       tag: v${{package.version}}
       expected-commit: 201b614ea6798f0ee9e75c63360eef891b36bb19
 
+  - uses: go/bump
+    with:
+      deps: |-
+        golang.org/x/crypto@v0.45.0
+      modroot: docgen
+
   - uses: go/bump
     with:
       deps: |-
         google.golang.org/grpc@v1.64.1
         golang.org/x/oauth2@v0.27.0
-        golang.org/x/crypto@v0.35.0
         github.com/containerd/containerd@v1.7.27
         golang.org/x/net@v0.38.0
         github.com/docker/docker@v28.0.0
+        golang.org/x/crypto@v0.45.0
       skip-initial-tidy: false
       tidy: false