diff --git a/pkgs/servers/mail/mailman/postorius.nix b/pkgs/servers/mail/mailman/postorius.nix
index 4dd32b8cd8f7..aabcf02e5115 100644
--- a/pkgs/servers/mail/mailman/postorius.nix
+++ b/pkgs/servers/mail/mailman/postorius.nix
@@ -2,6 +2,7 @@
   lib,
   python3,
   fetchPypi,
+  fetchpatch,
   nixosTests,
 }:
 
@@ -17,6 +18,15 @@ buildPythonPackage (finalAttrs: {
     hash = "sha256-GmbIqO+03LgbUxJ1nTStXrYN3t2MfvzbeYRAipfTW1o=";
   };
 
+  patches = [
+    (fetchpatch {
+      name = "security-fix.patch";
+      url = "https://gitlab.com/mailman/postorius/-/commit/c4706abd05ba6bcf472fc674b160d3a9d6a4868b.patch";
+      excludes = [ "src/postorius/doc/news.rst" ];
+      hash = "sha256-M8C7mO/KoVhl1YtZ5x3wqL+aBkepJ/7NoIRUmd0JpiM=";
+    })
+  ];
+
   propagatedBuildInputs = [
     django-mailman3
     readme-renderer