diff --git a/requirements-ci.in b/requirements-ci.in
index 531cc4c8..e52dfdae 100644
--- a/requirements-ci.in
+++ b/requirements-ci.in
@@ -7,7 +7,7 @@ whitenoise
 asv
 # NOTE: pin virtualenv to <20.31 until asv fixes integration
 # See https://github.com/airspeed-velocity/asv/issues/1484
-virtualenv==20.34.0
+virtualenv==20.35.3
 pytest-asyncio
 pytest-django
 typing-extensions>=4.12.2
diff --git a/requirements-ci.txt b/requirements-ci.txt
index b9e2089d..03e430f7 100644
--- a/requirements-ci.txt
+++ b/requirements-ci.txt
@@ -107,7 +107,7 @@ urllib3==2.2.3
     # via
     #   requests
     #   types-requests
-virtualenv==20.34.0
+virtualenv==20.35.3
     # via
     #   -r requirements-ci.in
     #   asv
diff --git a/requirements-dev.in b/requirements-dev.in
index bafcfd56..18e0272a 100644
--- a/requirements-dev.in
+++ b/requirements-dev.in
@@ -19,6 +19,6 @@ pygments-djc
 asv
 # NOTE: pin virtualenv to <20.31 until asv fixes integration
 # See https://github.com/airspeed-velocity/asv/issues/1484
-virtualenv==20.34.0
+virtualenv==20.35.3
 typing-extensions>=4.12.2
 pathspec
\ No newline at end of file
diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9b036091..3cefadc3 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -162,7 +162,7 @@ urllib3==2.5.0
     # via
     #   requests
     #   types-requests
-virtualenv==20.34.0
+virtualenv==20.35.3
     # via
     #   -r requirements-dev.in
     #   asv