diff --git a/bucket/gnupg.json b/bucket/gnupg.json
index 879885d663..421900f9ca 100644
--- a/bucket/gnupg.json
+++ b/bucket/gnupg.json
@@ -1,11 +1,11 @@
 {
     "##": "Duplicate of the gpg package",
-    "version": "2.3.5",
+    "version": "2.3.6",
     "description": "A complete and free implementation of the OpenPGP standard.",
     "homepage": "https://www.gnupg.org/",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.5_20220421.exe#/dl.7z",
-    "hash": "f90cf6639d0125abe98d2147708f2e1025cb82b3024e99ebadf3cc3bca465320",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.6_20220425.exe#/dl.7z",
+    "hash": "1a18adbb24868e14a40ccbd60003108840e238c0893e7bb6908805ae067eb0e8",
     "installer": {
         "script": [
             "Remove-Item \"$dir\\`$PLUGINSDIR\", \"$dir\\gnupg-uninstall.exe.nsis\" -Force -Recurse",