diff --git a/bucket/composer.json b/bucket/composer.json
index ee1c57a81f..ab4d8b9bc5 100644
--- a/bucket/composer.json
+++ b/bucket/composer.json
@@ -1,5 +1,5 @@
 {
-    "version": "2.3.6",
+    "version": "2.3.7",
     "description": "Dependency Manager for PHP",
     "homepage": "https://getcomposer.org/",
     "license": "MIT",
@@ -10,8 +10,8 @@
             "php-nts"
         ]
     },
-    "url": "https://getcomposer.org/download/2.3.6/composer.phar",
-    "hash": "188e079d509156130d30204c9c8b3f00134dbbc6afadc2f37ed05d02646a47dc",
+    "url": "https://getcomposer.org/download/2.3.7/composer.phar",
+    "hash": "3f2d46787d51070f922bf991aa08324566f726f186076c2a5e4e8b01a8ea3fd0",
     "pre_install": [
         "@(",
         "    'if ($args.length -eq 1 -and ($args -eq \"selfupdate\" -or $args -eq \"self-update\")) { & scoop update composer }'",