diff --git a/security/vuls/Makefile b/security/vuls/Makefile
index 0b8318ea24e2..12a7e07d17d9 100644
--- a/security/vuls/Makefile
+++ b/security/vuls/Makefile
@@ -1,56 +1,55 @@
 PORTNAME=	vuls
 DISTVERSIONPREFIX=v
-DISTVERSION=	0.39.3
-PORTREVISION=	1
+DISTVERSION=	0.40.1
 CATEGORIES=	security
 
 MAINTAINER=	girgen@FreeBSD.org
 COMMENT=	Agentless vulnerability scanner
 WWW=		https://vuls.io
 
 LICENSE=	GPLv3+
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 ONLY_FOR_ARCHS=	aarch64 amd64
 ONLY_FOR_ARCHS_REASON=	module modernc.org/sqlite only supported on aarch64 and amd64
 
 USES=		go:1.26+,modules
 
 GO_MODULE=	github.com/future-architect/vuls
 GO_TARGET=	./cmd/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags "-X main.version=${PORTVERSION}"
 
 USE_RC_SUBR=	${PORTNAME}
 
 SUB_FILES=	pkg-message periodic-vuls
 SUB_LIST=	PORTNAME=${PORTNAME} USERS=${USERS} GROUPS=${GROUPS}
 
 USERS=		vuls
 GROUPS=		vuls
 
 MAKE_ENV=	GOEXPERIMENT=jsonv2
 
 post-patch:
 	@${REINPLACE_CMD} -e 's,%%ETCDIR%%,${ETCDIR},' \
 		${WRKSRC}/subcmds/configtest.go \
 		${WRKSRC}/subcmds/report_windows.go \
 		${WRKSRC}/subcmds/report.go \
 		${WRKSRC}/subcmds/saas.go \
 		${WRKSRC}/subcmds/scan.go \
 		${WRKSRC}/subcmds/server.go \
 		${WRKSRC}/subcmds/tui.go
 
 post-install:
 	${MKDIR} ${STAGEDIR}${ETCDIR} \
 		${STAGEDIR}/var/db/vuls/results \
 		${STAGEDIR}/var/log/vuls \
 		${STAGEDIR}${PREFIX}/etc/periodic/daily \
 		${STAGEDIR}${PREFIX}/etc/newsyslog.conf.d
 	${INSTALL_DATA} ${FILESDIR}/newsyslog-${PORTNAME}.conf \
 		${STAGEDIR}${PREFIX}/etc/newsyslog.conf.d/${PORTNAME}.conf.sample
 	${INSTALL_DATA} ${FILESDIR}/config.toml \
 		${STAGEDIR}${ETCDIR}/config.toml.sample
 	${INSTALL_SCRIPT} ${WRKDIR}/periodic-${PORTNAME} \
 		${STAGEDIR}${PREFIX}/etc/periodic/daily/${PORTNAME}
 
 .include <bsd.port.mk>
diff --git a/security/vuls/distinfo b/security/vuls/distinfo
index 9a77d5d62f86..656f14a3e5b4 100644
--- a/security/vuls/distinfo
+++ b/security/vuls/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1781002501
-SHA256 (go/security_vuls/vuls-v0.39.3/v0.39.3.mod) = 089cc38089b84c3957f7cfae7a04af211e20d5572cc7a79fa4aedf565dbdb50e
-SIZE (go/security_vuls/vuls-v0.39.3/v0.39.3.mod) = 20260
-SHA256 (go/security_vuls/vuls-v0.39.3/v0.39.3.zip) = a29a2656d6cdfe148d6991ffc3cbb6bf80e3c62df7837fd49ef435ae1dfdc0fd
-SIZE (go/security_vuls/vuls-v0.39.3/v0.39.3.zip) = 1529367
+TIMESTAMP = 1785763753
+SHA256 (go/security_vuls/vuls-v0.40.1/v0.40.1.mod) = 020c846952e04f1983312b5d27e4dcbdd9cca270f4d988dc9c9e8df00eb39d51
+SIZE (go/security_vuls/vuls-v0.40.1/v0.40.1.mod) = 19577
+SHA256 (go/security_vuls/vuls-v0.40.1/v0.40.1.zip) = d01253d377ce6c18807302fefb616d02a47bb06fbf2a8eb8249b3c9fc3c53db6
+SIZE (go/security_vuls/vuls-v0.40.1/v0.40.1.zip) = 1444073