diff --git a/security/lego/Makefile b/security/lego/Makefile
index 9a51d3cb7f5f..af5ef3e46ec1 100644
--- a/security/lego/Makefile
+++ b/security/lego/Makefile
@@ -1,42 +1,42 @@
 PORTNAME=	lego
 DISTVERSIONPREFIX=	v
-DISTVERSION=	4.12.1
+DISTVERSION=	4.13.3
 CATEGORIES=	security
 
 MAINTAINER=	matt@matthoran.com
 COMMENT=	Let's Encrypt client and ACME library written in Go
 WWW=		https://github.com/go-acme/lego
 
 LICENSE=	MIT
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
 RUN_DEPENDS=	${LOCALBASE}/share/certs/ca-root-nss.crt:security/ca_root_nss
 
 USES=		go:modules
 GO_MODULE=	github.com/go-acme/lego/v4
 GO_TARGET=	./cmd/lego
 GO_BUILDFLAGS=	-ldflags '-X "main.version=${DISTVERSION}"'
 
 SAMPLE_FILES=	deploy.sh.sample lego.sh.sample
 SUB_FILES=	${SAMPLE_FILES} 604.lego pkg-message
 SUB_LIST=	LEGO_USER=${LEGO_USER} \
 		PORTNAME=${PORTNAME}
 
 LEGO_USER?=	_lego
 
 USERS=		${LEGO_USER}
 GROUPS=		${LEGO_USER}
 
 PERIODIC_DIRS=	etc/periodic/weekly
 PERIODIC_FILES=	604.lego
 
 post-install:
 	${MKDIR} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}
 	${INSTALL_SCRIPT} ${WRKDIR}/${PERIODIC_FILES} ${STAGEDIR}${PREFIX}/${PERIODIC_DIRS}/${PERIODIC_FILES}
 	${MKDIR} ${STAGEDIR}${PREFIX}/etc/ssl/lego \
 		${STAGEDIR}${ETCDIR} ${STAGEDIR}${WWWDIR}
 .	for d in ${SAMPLE_FILES}
 		${INSTALL_SCRIPT} ${WRKDIR}/${d} ${STAGEDIR}${ETCDIR}/${d}
 .	endfor
 
 .include <bsd.port.mk>
diff --git a/security/lego/distinfo b/security/lego/distinfo
index 665e733c4f12..07be8460bc57 100644
--- a/security/lego/distinfo
+++ b/security/lego/distinfo
@@ -1,5 +1,5 @@
-TIMESTAMP = 1686520717
-SHA256 (go/security_lego/lego-v4.12.1/v4.12.1.mod) = 0f5999f5e33e1e960917355d45dc303e52574ff76eeb37060a26f5e8a4066d52
-SIZE (go/security_lego/lego-v4.12.1/v4.12.1.mod) = 6462
-SHA256 (go/security_lego/lego-v4.12.1/v4.12.1.zip) = 1cf4291be5a1e7e1de96be280d0ba40266d2d6ea9a8322252a834402e8bf4301
-SIZE (go/security_lego/lego-v4.12.1/v4.12.1.zip) = 1271269
+TIMESTAMP = 1690724645
+SHA256 (go/security_lego/lego-v4.13.3/v4.13.3.mod) = 98ff82ae1d2ce7ca965dd4d98b3b427cea0794549c69cf101509595fecb2f0ae
+SIZE (go/security_lego/lego-v4.13.3/v4.13.3.mod) = 7000
+SHA256 (go/security_lego/lego-v4.13.3/v4.13.3.zip) = 231a13b73abddcb6b4eb658fcbd5c4724fb9bf3521cf244a648a275256fbc98c
+SIZE (go/security_lego/lego-v4.13.3/v4.13.3.zip) = 1319317