diff --git a/pyproject.toml b/pyproject.toml
index 8b9a502..241c516 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -47,7 +47,7 @@ docs = [
     "mkdocstrings-python>=1.10.0",
     "ipykernel>=6.29.5",
     "ipython>=8.31.0",
-    "tornado>=6.5.6", # Pinning version to address vulnerability CVE-2026-49854
+    "tornado>=6.5.7", # Pinning version to address vulnerabilities CVE-2026-49854, CVE-2026-49853, CVE-2026-49855, GHSA-pw6j-qg29-8w7f
 ]
 
 # Default dependency groups to be installed
diff --git a/uv.lock b/uv.lock
index 9333d82..e80aef4 100644
--- a/uv.lock
+++ b/uv.lock
@@ -333,7 +333,7 @@ docs = [
     { name = "mkdocstrings", specifier = ">=0.24.1" },
     { name = "mkdocstrings-python", specifier = ">=1.10.0" },
     { name = "pymdown-extensions", specifier = ">=10.21.3" },
-    { name = "tornado", specifier = ">=6.5.6" },
+    { name = "tornado", specifier = ">=6.5.7" },
 ]
 test = [
     { name = "aiohttp", specifier = ">=3.14.1" },