diff --git a/src/TodoApp.Infrastructure/TodoApp.Infrastructure.csproj b/src/TodoApp.Infrastructure/TodoApp.Infrastructure.csproj
index 312067e..1a8375d 100644
--- a/src/TodoApp.Infrastructure/TodoApp.Infrastructure.csproj
+++ b/src/TodoApp.Infrastructure/TodoApp.Infrastructure.csproj
@@ -22,7 +22,7 @@
     <!-- Security override: pin the patched native SQLite (CVE-2025-6965 / NU1903).
          Overrides the vulnerable transitive SQLitePCLRaw.lib.e_sqlite3 pulled in by
          Microsoft.Data.Sqlite. Remove once Microsoft.Data.Sqlite ships a fixed dependency. -->
-    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
+    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.53.3" />
   </ItemGroup>
 
   <!-- DDL scripts loaded by SchemaInitializer at runtime. -->
diff --git a/src/TodoApp.Infrastructure/packages.lock.json b/src/TodoApp.Infrastructure/packages.lock.json
index 2eb745d..abbb3c9 100644
--- a/src/TodoApp.Infrastructure/packages.lock.json
+++ b/src/TodoApp.Infrastructure/packages.lock.json
@@ -51,9 +51,9 @@
       },
       "SQLitePCLRaw.lib.e_sqlite3": {
         "type": "Direct",
-        "requested": "[3.50.3, )",
-        "resolved": "3.50.3",
-        "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
+        "requested": "[3.53.3, )",
+        "resolved": "3.53.3",
+        "contentHash": "ZXiSbBkrlw2Of/dBqny/qtQol7dlThrUD8zH/jkQicCFm2yn2BbhKsQW0+YHAzhANWz4ZJCz7gvo88BwluVhkA=="
       },
       "System.IdentityModel.Tokens.Jwt": {
         "type": "Direct",
diff --git a/src/TodoApp.WebApi/packages.lock.json b/src/TodoApp.WebApi/packages.lock.json
index a871b65..21eef48 100644
--- a/src/TodoApp.WebApi/packages.lock.json
+++ b/src/TodoApp.WebApi/packages.lock.json
@@ -284,8 +284,8 @@
       },
       "SQLitePCLRaw.lib.e_sqlite3": {
         "type": "Transitive",
-        "resolved": "3.50.3",
-        "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
+        "resolved": "3.53.3",
+        "contentHash": "ZXiSbBkrlw2Of/dBqny/qtQol7dlThrUD8zH/jkQicCFm2yn2BbhKsQW0+YHAzhANWz4ZJCz7gvo88BwluVhkA=="
       },
       "SQLitePCLRaw.provider.e_sqlite3": {
         "type": "Transitive",
@@ -388,7 +388,7 @@
           "Google.Apis.Auth": "[1.75.0, )",
           "Microsoft.Data.SqlClient": "[6.1.6, )",
           "Microsoft.Data.Sqlite": "[10.0.10, )",
-          "SQLitePCLRaw.lib.e_sqlite3": "[3.50.3, )",
+          "SQLitePCLRaw.lib.e_sqlite3": "[3.53.3, )",
           "System.IdentityModel.Tokens.Jwt": "[8.19.2, )",
           "TodoApp.Application": "[1.0.0, )",
           "TodoApp.Domain": "[1.0.0, )"
diff --git a/tests/TodoApp.IntegrationTests/TodoApp.IntegrationTests.csproj b/tests/TodoApp.IntegrationTests/TodoApp.IntegrationTests.csproj
index ed435f3..0719269 100644
--- a/tests/TodoApp.IntegrationTests/TodoApp.IntegrationTests.csproj
+++ b/tests/TodoApp.IntegrationTests/TodoApp.IntegrationTests.csproj
@@ -17,7 +17,7 @@
     <!-- SQLite for the in-memory integration test database (schema built by SchemaInitializer). -->
     <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.10" />
     <!-- Security override: patched native SQLite (CVE-2025-6965 / NU1903). See Infrastructure.csproj. -->
-    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
+    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.53.3" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/TodoApp.IntegrationTests/packages.lock.json b/tests/TodoApp.IntegrationTests/packages.lock.json
index ae52308..0b7f3a4 100644
--- a/tests/TodoApp.IntegrationTests/packages.lock.json
+++ b/tests/TodoApp.IntegrationTests/packages.lock.json
@@ -45,9 +45,9 @@
       },
       "SQLitePCLRaw.lib.e_sqlite3": {
         "type": "Direct",
-        "requested": "[3.50.3, )",
-        "resolved": "3.50.3",
-        "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
+        "requested": "[3.53.3, )",
+        "resolved": "3.53.3",
+        "contentHash": "ZXiSbBkrlw2Of/dBqny/qtQol7dlThrUD8zH/jkQicCFm2yn2BbhKsQW0+YHAzhANWz4ZJCz7gvo88BwluVhkA=="
       },
       "xunit": {
         "type": "Direct",
@@ -816,7 +816,7 @@
           "Google.Apis.Auth": "[1.75.0, )",
           "Microsoft.Data.SqlClient": "[6.1.6, )",
           "Microsoft.Data.Sqlite": "[10.0.10, )",
-          "SQLitePCLRaw.lib.e_sqlite3": "[3.50.3, )",
+          "SQLitePCLRaw.lib.e_sqlite3": "[3.53.3, )",
           "System.IdentityModel.Tokens.Jwt": "[8.19.2, )",
           "TodoApp.Application": "[1.0.0, )",
           "TodoApp.Domain": "[1.0.0, )"
diff --git a/tests/TodoApp.UnitTests/TodoApp.UnitTests.csproj b/tests/TodoApp.UnitTests/TodoApp.UnitTests.csproj
index e30c2ce..09780cd 100644
--- a/tests/TodoApp.UnitTests/TodoApp.UnitTests.csproj
+++ b/tests/TodoApp.UnitTests/TodoApp.UnitTests.csproj
@@ -17,7 +17,7 @@
     <PackageReference Include="Dapper" Version="2.1.79" />
     <PackageReference Include="Microsoft.Data.Sqlite" Version="10.0.10" />
     <!-- Security override: patched native SQLite (CVE-2025-6965 / NU1903). See Infrastructure.csproj. -->
-    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.50.3" />
+    <PackageReference Include="SQLitePCLRaw.lib.e_sqlite3" Version="3.53.3" />
   </ItemGroup>
 
   <ItemGroup>
diff --git a/tests/TodoApp.UnitTests/packages.lock.json b/tests/TodoApp.UnitTests/packages.lock.json
index f07667d..e081eed 100644
--- a/tests/TodoApp.UnitTests/packages.lock.json
+++ b/tests/TodoApp.UnitTests/packages.lock.json
@@ -40,9 +40,9 @@
       },
       "SQLitePCLRaw.lib.e_sqlite3": {
         "type": "Direct",
-        "requested": "[3.50.3, )",
-        "resolved": "3.50.3",
-        "contentHash": "tVyhqQ8wxgedWiiPFChyZhE8I3PkOM/AE1azsj1qsdYUws13ONBFyi3aDxju4tD2kzedB2q5+50WrTyY0h2gMQ=="
+        "requested": "[3.53.3, )",
+        "resolved": "3.53.3",
+        "contentHash": "ZXiSbBkrlw2Of/dBqny/qtQol7dlThrUD8zH/jkQicCFm2yn2BbhKsQW0+YHAzhANWz4ZJCz7gvo88BwluVhkA=="
       },
       "xunit": {
         "type": "Direct",
@@ -472,7 +472,7 @@
           "Google.Apis.Auth": "[1.75.0, )",
           "Microsoft.Data.SqlClient": "[6.1.6, )",
           "Microsoft.Data.Sqlite": "[10.0.10, )",
-          "SQLitePCLRaw.lib.e_sqlite3": "[3.50.3, )",
+          "SQLitePCLRaw.lib.e_sqlite3": "[3.53.3, )",
           "System.IdentityModel.Tokens.Jwt": "[8.19.2, )",
           "TodoApp.Application": "[1.0.0, )",
           "TodoApp.Domain": "[1.0.0, )"