diff --git a/bucket/gnupg.json b/bucket/gnupg.json
index 1d45029bb6..879885d663 100644
--- a/bucket/gnupg.json
+++ b/bucket/gnupg.json
@@ -1,11 +1,11 @@
 {
     "##": "Duplicate of the gpg package",
-    "version": "2.3.4",
+    "version": "2.3.5",
     "description": "A complete and free implementation of the OpenPGP standard.",
     "homepage": "https://www.gnupg.org/",
     "license": "GPL-3.0-or-later",
-    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.4_20211220.exe#/dl.7z",
-    "hash": "f539e190fb8b191a5e521af41163a4d04a090566b2aa9d205e4576d1b42f268c",
+    "url": "https://www.gnupg.org/ftp/gcrypt/binary/gnupg-w32-2.3.5_20220421.exe#/dl.7z",
+    "hash": "f90cf6639d0125abe98d2147708f2e1025cb82b3024e99ebadf3cc3bca465320",
     "installer": {
         "script": [
             "Remove-Item \"$dir\\`$PLUGINSDIR\", \"$dir\\gnupg-uninstall.exe.nsis\" -Force -Recurse",