diff --git a/homeassistant/package_constraints.txt b/homeassistant/package_constraints.txt
index 767bd20626669..e489006867f41 100644
--- a/homeassistant/package_constraints.txt
+++ b/homeassistant/package_constraints.txt
@@ -62,7 +62,7 @@ urllib3>=1.26.5,<2
 voluptuous-openapi==0.0.5
 voluptuous-serialize==2.6.0
 voluptuous==0.15.2
-yarl==1.9.8
+yarl==1.9.9
 zeroconf==0.133.0
 
 # Constrain pycryptodome to avoid vulnerability
diff --git a/pyproject.toml b/pyproject.toml
index 2c8e0a432f088..e2d5e213811d1 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -69,7 +69,7 @@ dependencies    = [
     "voluptuous==0.15.2",
     "voluptuous-serialize==2.6.0",
     "voluptuous-openapi==0.0.5",
-    "yarl==1.9.8",
+    "yarl==1.9.9",
 ]
 
 [project.urls]
diff --git a/requirements.txt b/requirements.txt
index 7f28e93cd4f21..1d6b4e74d2270 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -41,4 +41,4 @@ urllib3>=1.26.5,<2
 voluptuous==0.15.2
 voluptuous-serialize==2.6.0
 voluptuous-openapi==0.0.5
-yarl==1.9.8
+yarl==1.9.9