diff --git a/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj b/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
index 9b1f4d1..4af99a2 100644
--- a/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
+++ b/src/Kuestenlogik.Bowire.Samples.GraphQL/Kuestenlogik.Bowire.Samples.GraphQL.csproj
@@ -1,7 +1,7 @@
 <Project Sdk="Microsoft.NET.Sdk.Web">
   <ItemGroup>
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.0" />
-    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.0.0" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.3" />
+    <PackageReference Include="HotChocolate.Subscriptions.InMemory" Version="16.0.3" />
     <ProjectReference Include="..\Kuestenlogik.Bowire.Samples.Shared\Kuestenlogik.Bowire.Samples.Shared.csproj" />
   </ItemGroup>
 </Project>
diff --git a/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj b/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
index 27e4a9c..425c8e9 100644
--- a/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
+++ b/src/Kuestenlogik.Bowire.Samples.Vulnerable/Kuestenlogik.Bowire.Samples.Vulnerable.csproj
@@ -15,7 +15,7 @@
   <ItemGroup>
     <!-- HotChocolate version matches Kuestenlogik.Bowire.Samples.GraphQL
          to avoid drift across the samples solution. -->
-    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.0" />
+    <PackageReference Include="HotChocolate.AspNetCore" Version="16.0.3" />
 
     <!-- gRPC + Server Reflection versions match
          Kuestenlogik.Bowire.Samples.Grpc to keep the samples