diff --git a/UPSTREAM_PROJECTS.yaml b/UPSTREAM_PROJECTS.yaml
index 777c282ca4..bb5fee0ec5 100644
--- a/UPSTREAM_PROJECTS.yaml
+++ b/UPSTREAM_PROJECTS.yaml
@@ -55,7 +55,7 @@ projects:
     repos:
       - name: kube-rbac-proxy
         versions:
-          - tag: v0.18.1
+          - tag: v0.18.2
             go_version: "1.23"
   - org: cert-manager
     repos:
diff --git a/projects/brancz/kube-rbac-proxy/ATTRIBUTION.txt b/projects/brancz/kube-rbac-proxy/ATTRIBUTION.txt
index 9a4108538d..d39cee3bde 100644
--- a/projects/brancz/kube-rbac-proxy/ATTRIBUTION.txt
+++ b/projects/brancz/kube-rbac-proxy/ATTRIBUTION.txt
@@ -1,5 +1,5 @@
 
-** github.com/brancz/kube-rbac-proxy; version v0.18.1 --
+** github.com/brancz/kube-rbac-proxy; version v0.18.2 --
 https://github.com/brancz/kube-rbac-proxy
 
 ** github.com/coreos/go-oidc; version v2.2.1+incompatible --
@@ -128,25 +128,25 @@ https://github.com/go-jose/go-jose
 ** gopkg.in/yaml.v2; version v2.4.0 --
 https://gopkg.in/yaml.v2
 
-** k8s.io/api; version v0.31.0 --
+** k8s.io/api; version v0.31.3 --
 https://github.com/kubernetes/api
 
-** k8s.io/apimachinery/pkg; version v0.31.0 --
+** k8s.io/apimachinery/pkg; version v0.31.3 --
 https://github.com/kubernetes/apimachinery
 
-** k8s.io/apiserver; version v0.31.0 --
+** k8s.io/apiserver; version v0.31.3 --
 https://github.com/kubernetes/apiserver
 
-** k8s.io/client-go; version v0.31.0 --
+** k8s.io/client-go; version v0.31.3 --
 https://github.com/kubernetes/client-go
 
-** k8s.io/component-base; version v0.31.0 --
+** k8s.io/component-base; version v0.31.3 --
 https://github.com/kubernetes/component-base
 
 ** k8s.io/klog/v2; version v2.130.1 --
 https://github.com/kubernetes/klog
 
-** k8s.io/kms; version v0.31.0 --
+** k8s.io/kms; version v0.31.3 --
 https://github.com/kubernetes/kms
 
 ** k8s.io/kube-openapi/pkg; version v0.0.0-20240228011516-70dd3763d340 --
@@ -877,7 +877,7 @@ https://golang.org/x/oauth2
 ** golang.org/x/time/rate; version v0.3.0 --
 https://golang.org/x/time
 
-** k8s.io/apimachinery/third_party/forked/golang; version v0.31.0 --
+** k8s.io/apimachinery/third_party/forked/golang; version v0.31.3 --
 https://github.com/kubernetes/apimachinery
 
 Copyright (c) 2009 The Go Authors. All rights reserved.
@@ -910,22 +910,22 @@ OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
 ------
 
-** golang.org/x/crypto; version v0.26.0 --
+** golang.org/x/crypto; version v0.29.0 --
 https://golang.org/x/crypto
 
-** golang.org/x/net; version v0.28.0 --
+** golang.org/x/net; version v0.31.0 --
 https://golang.org/x/net
 
-** golang.org/x/sync/singleflight; version v0.8.0 --
+** golang.org/x/sync/singleflight; version v0.9.0 --
 https://golang.org/x/sync
 
-** golang.org/x/sys/unix; version v0.23.0 --
+** golang.org/x/sys/unix; version v0.27.0 --
 https://golang.org/x/sys
 
-** golang.org/x/term; version v0.23.0 --
+** golang.org/x/term; version v0.26.0 --
 https://golang.org/x/term
 
-** golang.org/x/text; version v0.17.0 --
+** golang.org/x/text; version v0.20.0 --
 https://golang.org/x/text
 
 Copyright 2009 The Go Authors.
diff --git a/projects/brancz/kube-rbac-proxy/CHECKSUMS b/projects/brancz/kube-rbac-proxy/CHECKSUMS
index d19c391ef7..69e10e1119 100644
--- a/projects/brancz/kube-rbac-proxy/CHECKSUMS
+++ b/projects/brancz/kube-rbac-proxy/CHECKSUMS
@@ -1,2 +1,2 @@
-ff1b024e37b411a356ac2ca835bfd5305795e2385ec5689f443b0916d0203f40  _output/bin/kube-rbac-proxy/linux-amd64/kube-rbac-proxy
-f58459e3de77c7350790d39b1f95521d6500b180467fccd8057cf87b174ae675  _output/bin/kube-rbac-proxy/linux-arm64/kube-rbac-proxy
+59c0e9ecd735528e865138699ea1282499f32f7c7b01293da4921caf2173f5e0  _output/bin/kube-rbac-proxy/linux-amd64/kube-rbac-proxy
+0034f7c3ce6b6af7fcd432283321d53ae188d35ff9621ad9967903f1294a73a2  _output/bin/kube-rbac-proxy/linux-arm64/kube-rbac-proxy
diff --git a/projects/brancz/kube-rbac-proxy/GIT_TAG b/projects/brancz/kube-rbac-proxy/GIT_TAG
index f3a5a576fb..69968c922c 100644
--- a/projects/brancz/kube-rbac-proxy/GIT_TAG
+++ b/projects/brancz/kube-rbac-proxy/GIT_TAG
@@ -1 +1 @@
-v0.18.1
+v0.18.2
diff --git a/projects/brancz/kube-rbac-proxy/README.md b/projects/brancz/kube-rbac-proxy/README.md
index 1d2f043bb3..cef726057f 100644
--- a/projects/brancz/kube-rbac-proxy/README.md
+++ b/projects/brancz/kube-rbac-proxy/README.md
@@ -1,5 +1,5 @@
 ## **Kube RBAC Proxy**
-![Version](https://img.shields.io/badge/version-v0.18.1-blue)
+![Version](https://img.shields.io/badge/version-v0.18.2-blue)
 ![Build Status](https://codebuild.us-west-2.amazonaws.com/badges?uuid=eyJlbmNyeXB0ZWREYXRhIjoiZUxRMjRTYUl6NEhJWkI1YVh5QVB3UitEY1dCcExLTUxGR21DQ0IySUZUTEI4N3I4NnMwbnIxUW9OZ1dudm9VdTRoaHVzUHhyMjNwek9wYXY3amh3NlFVPSIsIml2UGFyYW1ldGVyU3BlYyI6ImdSc3ZLZmpxM1BMYnd0dGwiLCJtYXRlcmlhbFNldFNlcmlhbCI6MX0%3D&branch=main)
 
 The [kube-rbac-proxy](https://github.com/brancz/kube-rbac-proxy) is an HTTP proxy for a single upstream endpoint, that can perform RBAC authorization against the Kubernetes API using `SubjectAccessReview`. In Kubernetes clusters without NetworkPolicies, any Pod can perform requests to every other Pod in the cluster. This proxy serves to restrict requests to only those Pods that present a valid and RBAC-authorized token or client TLS certificate.