diff --git a/security/osv-scanner/Makefile b/security/osv-scanner/Makefile
index 93eb9be6b416..ec7d95b855f0 100644
--- a/security/osv-scanner/Makefile
+++ b/security/osv-scanner/Makefile
@@ -1,44 +1,43 @@
 PORTNAME=	osv-scanner
 DISTVERSIONPREFIX=	v
-DISTVERSION=	2.3.3
-PORTREVISION=	2
+DISTVERSION=	2.3.5
 CATEGORIES=	security
 
 MAINTAINER=	dutra@FreeBSD.org
 COMMENT=	Vulnerability scanner written in Go which uses the OSV database
 WWW=		https://github.com/google/osv-scanner
 
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-USES=		go:1.25+,modules,run
+USES=		go:1.26+,modules,run
 
 NOT_FOR_ARCHS=	armv6 armv7 i386 mips powerpc powerpcspe
 
 _BUILD_VERSION=	${DISTVERSION}
-_BUILD_COMMIT=	b97d1de
+_BUILD_COMMIT=	30bcc13
 _BUILD_DATE=	$$(date +%Y-%m-%d)
 
 GO_MODULE=	github.com/google/${PORTNAME}/v2
 GO_TARGET=	./cmd/${PORTNAME}
 GO_BUILDFLAGS=	-ldflags "\
 		-s -w \
 		-X main.version=${_BUILD_VERSION} \
 		-X main.date=${_BUILD_DATE} \
 		-X main.commit=${_BUILD_COMMIT}"
 
 PLIST_FILES=	${GO_TARGET:C/.\/cmd/bin/}
 PORTDOCS=	CHANGELOG.md CONTRIBUTING.md README.md
 
 OPTIONS_DEFINE=	DOCS
 
 post-patch:
 	@${REINPLACE_CMD} -e 's,%%GO_SUFFIX%%,${GO_SUFFIX},' \
 		${WRKSRC}/internal/sourceanalysis/go.go
 
 post-install-DOCS-on:
 	@${MKDIR} ${STAGEDIR}${DOCSDIR}
 	${INSTALL_DATA} ${PORTDOCS:S|^|${WRKSRC}/|} \
 		${STAGEDIR}${DOCSDIR}
 
 .include <bsd.port.mk>
diff --git a/security/osv-scanner/distinfo b/security/osv-scanner/distinfo
index 971df964cb54..5a333f558b21 100644
--- a/security/osv-scanner/distinfo
+++ b/security/osv-scanner/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1772341659
-SHA256 (go/security_osv-scanner/osv-scanner-v2.3.3/v2.3.3.mod) = c16b446dbcb94259648ac073d4c3a2a35df3956b26af9f7af084be7f395d3886
-SIZE (go/security_osv-scanner/osv-scanner-v2.3.3/v2.3.3.mod) = 11571
-SHA256 (go/security_osv-scanner/osv-scanner-v2.3.3/v2.3.3.zip) = f7692d7d1c422df7722474461d07a67354c80461fc791a9de64b7a0b31c7c1f3
-SIZE (go/security_osv-scanner/osv-scanner-v2.3.3/v2.3.3.zip) = 13815387
+TIMESTAMP = 1775797499
+SHA256 (go/security_osv-scanner/osv-scanner-v2.3.5/v2.3.5.mod) = b5e1aacf9049c17c625c519a93531249677eccc6f9abe25465e25da1fc1c2c53
+SIZE (go/security_osv-scanner/osv-scanner-v2.3.5/v2.3.5.mod) = 12367
+SHA256 (go/security_osv-scanner/osv-scanner-v2.3.5/v2.3.5.zip) = 7bf29c74c380739d2ba970e931636bb08d7037a1d00d6da2b7a1418dc74bc73f
+SIZE (go/security_osv-scanner/osv-scanner-v2.3.5/v2.3.5.zip) = 13798638