diff --git a/requirements.txt b/requirements.txt
index 1ebcc92..892f479 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -11,7 +11,7 @@ python-dotenv==1.2.2
 aiohttp==3.14.3
 # Never imported here: yt-dlp uses it for browser impersonation, which some
 # extractors require. Removing it breaks those sites, not an import.
-curl_cffi==0.15.0
+curl_cffi==0.16.3
 
 # Deliberately NOT pinned. YouTube changes its player, signature challenge and
 # extractors constantly, so a pinned yt-dlp stops resolving videos within weeks