diff --git a/build/versions.env b/build/versions.env
index a7d3e0f..900ce57 100644
--- a/build/versions.env
+++ b/build/versions.env
@@ -5,7 +5,7 @@ NGINX_MAINLINE_VERSION="1.31.5"
 
 # OpenSSL 3.5: LTS, native PQC/ML-KEM.
 OPENSSL_VERSION="3.5.8"
-PCRE2_VERSION="10.47"
+PCRE2_VERSION="10.48"
 
 LIBMODSECURITY_VERSION="3.0.16"
 MODSECURITY_NGINX_VERSION="1.0.4"
@@ -21,7 +21,7 @@ CRS_VERSION="4.25.1"
 NGINX_STABLE_SHA256="4261dc90e9e47c1c4041276e9aaa3d48ebe2e664f728e14fa95ae6c67d57a08b"
 NGINX_MAINLINE_SHA256="e951607d534836624bd36b6b45a71dbfb055237deae3738da6bbf3270dada279"
 OPENSSL_SHA256="a8f84a39918ec6415ce765d9b429d313ba97b8143169c172e734b9514464f5b2"
-PCRE2_SHA256="0019dfc4b32d63c1392aa264aed2253c1e0c2fb09216f8e2cc269bbfb8bb49b5"
+PCRE2_SHA256="ebcc25aadf2a51fa1fefa9b8bc9e7a79b3dae86870a0f1152a22e42befd46888"
 HEADERS_MORE_SHA256="c14cb5e6c998590c209efbf77bd7637ce2cab02332e4192756a8af5b26ba4284"
 GEOIP2_MODULE_SHA256="ad72fc23348d715a330994984531fab9b3606e160483236737f9a4a6957d9452"
 LIBMODSECURITY_SHA256="739be3c71b1939f14e91afe1eeae654acbd440da11bd29790458840bc315b4c0"