diff --git a/.gitignore b/.gitignore
index eb7fdc3..a1b6061 100644
--- a/.gitignore
+++ b/.gitignore
@@ -15,3 +15,4 @@
 /yarnpkg-v1.22.22-bundled-20250624.tar.gz
 /yarnpkg-v1.22.22-bundled-20250728.tar.gz
 /yarnpkg-v1.22.22-bundled-20250930.tar.gz
+/yarnpkg-v1.22.22-bundled-20251203.tar.gz
diff --git a/sources b/sources
index 8a66190..b1beda2 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (yarnpkg-v1.22.22-bundled-20250930.tar.gz) = c6ed6537c82961002eefd2b6051abc18ea29e5ece420ca8c6df0a7ec686e564e32f75dac97092e92e21c95a0d15ee278ad2f06d1cd832223f16cfd439160d502
+SHA512 (yarnpkg-v1.22.22-bundled-20251203.tar.gz) = afcf0f4e3719a1d41e60b8e9a9633291161f3a7b04b67d85b3f12cfd9dce8abf9fef3f7be2eab90f3e8efa49e564342175a20ca1e305665a1d453a116b1f79d2
diff --git a/yarnpkg.spec b/yarnpkg.spec
index 41fce7d..41fb0c5 100644
--- a/yarnpkg.spec
+++ b/yarnpkg.spec
@@ -8,7 +8,7 @@
 # don't require bundled modules
 %global __requires_exclude_from ^(%{nodejs_sitelib}/yarn/lib/.*|%{nodejs_sitelib}/yarn/bin/yarn(|\\.cmd|\\.ps1|pkg.*))$
 
-%global bundledate 20250930
+%global bundledate 20251203
 
 Name:           yarnpkg
 Version:        1.22.22
@@ -92,6 +92,9 @@ if [[ $(%{buildroot}%{_bindir}/yarn --version) == %{version} ]] ; then echo PASS
 
 
 %changelog
+* Wed Dec 03 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-13
+- Refresh bundle, fixes CVE-2025-64756
+
 * Tue Sep 30 2025 Sandro Mani <manisandro@gmail.com> - 1.22.22-12
 - Regenerate bundle, fixes CVE-2025-59343
 - Patch out eslint and commitizen devDependencies to reduce dependencies