diff --git a/cmake/Modules/LocalLibXml2.cmake b/cmake/Modules/LocalLibXml2.cmake
index 01cdc84ea4..3ec107de77 100644
--- a/cmake/Modules/LocalLibXml2.cmake
+++ b/cmake/Modules/LocalLibXml2.cmake
@@ -1,4 +1,4 @@
-set(AVIF_LOCAL_LIBXML_GIT_TAG "v2.11.5")
+set(AVIF_LOCAL_LIBXML_GIT_TAG "v2.12.6")
 
 set(LIB_FILENAME "${AVIF_SOURCE_DIR}/ext/libxml2/install.libavif/lib/${AVIF_LIBRARY_PREFIX}xml2${CMAKE_STATIC_LIBRARY_SUFFIX}")
 if(EXISTS "${LIB_FILENAME}")
diff --git a/cmake/Modules/LocalZlibpng.cmake b/cmake/Modules/LocalZlibpng.cmake
index eada4494af..cf230e7e32 100644
--- a/cmake/Modules/LocalZlibpng.cmake
+++ b/cmake/Modules/LocalZlibpng.cmake
@@ -1,5 +1,5 @@
-set(AVIF_LOCAL_ZLIB_GIT_TAG v1.3)
-set(AVIF_LOCAL_LIBPNG_GIT_TAG v1.6.40)
+set(AVIF_LOCAL_ZLIB_GIT_TAG v1.3.1)
+set(AVIF_LOCAL_LIBPNG_GIT_TAG v1.6.43)
 
 if(EXISTS "${AVIF_SOURCE_DIR}/ext/zlib")
     message(STATUS "libavif(AVIF_ZLIBPNG=LOCAL): ext/zlib found; using as FetchContent SOURCE_DIR")
diff --git a/ext/libxml2.cmd b/ext/libxml2.cmd
index ea39c7e3e7..a9dc19a008 100755
--- a/ext/libxml2.cmd
+++ b/ext/libxml2.cmd
@@ -5,7 +5,7 @@
 
 : # libxml2 is released under the MIT License.
 
-git clone -b v2.11.5 --depth 1 https://gitlab.gnome.org/GNOME/libxml2.git
+git clone -b v2.12.6 --depth 1 https://gitlab.gnome.org/GNOME/libxml2.git
 
 mkdir -p libxml2/build.libavif
 cmake libxml2 -B libxml2/build.libavif/ -G Ninja -DBUILD_SHARED_LIBS=OFF -DCMAKE_INSTALL_PREFIX=libxml2/install.libavif \
diff --git a/ext/zlibpng.cmd b/ext/zlibpng.cmd
index c257731242..f5f95e9131 100755
--- a/ext/zlibpng.cmd
+++ b/ext/zlibpng.cmd
@@ -4,5 +4,5 @@
 
 : # The odd choice of comment style in this file is to try to share this script between *nix and win32.
 
-git clone -b v1.3 --depth 1 https://github.com/madler/zlib.git
-git clone -b v1.6.40 --depth 1 https://github.com/glennrp/libpng.git
+git clone -b v1.3.1 --depth 1 https://github.com/madler/zlib.git
+git clone -b v1.6.43 --depth 1 https://github.com/glennrp/libpng.git