diff --git a/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj b/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
index 90b30ca..86c020d 100644
--- a/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
+++ b/src/StackAlchemist.Engine/StackAlchemist.Engine.csproj
@@ -38,7 +38,7 @@
     <PackageReference Include="OpenTelemetry.Exporter.Console" Version="1.*" />
     <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.*" />
     <PackageReference Include="DotNetEnv" Version="3.*" />
-    <PackageReference Include="Handlebars.Net" Version="2.1.6" />
+    <PackageReference Include="Handlebars.Net" Version="2.4.3" />
     <PackageReference Include="Microsoft.AspNetCore.OpenApi" Version="10.0.11" />
     <!-- Explicit pin: AspNetCore.OpenApi 10.0.9 pulls Microsoft.OpenApi 2.0.0
          (NU1903 / GHSA-v5pm-xwqc-g5wc, patched in 2.7.5). Keep on latest 2.x.
diff --git a/src/StackAlchemist.Engine/packages.lock.json b/src/StackAlchemist.Engine/packages.lock.json
index 3f5962e..1d49531 100644
--- a/src/StackAlchemist.Engine/packages.lock.json
+++ b/src/StackAlchemist.Engine/packages.lock.json
@@ -28,9 +28,9 @@
       },
       "Handlebars.Net": {
         "type": "Direct",
-        "requested": "[2.1.6, )",
-        "resolved": "2.1.6",
-        "contentHash": "WsYWCEXsIM6hEOSOSRHtIYLjC8BnbT5MVmqhNKRqUI7qiv0t8x3nJiBTEv0ZZfvUAMAFnadGIzSsS/U2anVG1Q=="
+        "requested": "[2.4.3, )",
+        "resolved": "2.4.3",
+        "contentHash": "arsZCVYV/2f39W7KBRD3jnsluHAI8cNFGGbcfmY92GRnpyXZoJHleevuS6BTXJgNE44vtSeB3FbK6udZPa7K6w=="
       },
       "Microsoft.AspNetCore.OpenApi": {
         "type": "Direct",