diff --git a/pkgs/by-name/pa/paperless-ngx/package.nix b/pkgs/by-name/pa/paperless-ngx/package.nix
index c926b86282bf..16b687473ea1 100644
--- a/pkgs/by-name/pa/paperless-ngx/package.nix
+++ b/pkgs/by-name/pa/paperless-ngx/package.nix
@@ -114,6 +114,7 @@ pythonPackages.buildPythonApplication (finalAttrs: {
     "django-allauth"
     "django-auditlog"
     "django-cachalot"
+    "django-guardian"
     "drf-spectacular-sidecar"
     "python-dotenv"
     "gotenberg-client"
diff --git a/pkgs/development/python-modules/django-guardian/default.nix b/pkgs/development/python-modules/django-guardian/default.nix
index 0778bc601dee..3103f6f116a1 100644
--- a/pkgs/development/python-modules/django-guardian/default.nix
+++ b/pkgs/development/python-modules/django-guardian/default.nix
@@ -10,16 +10,16 @@
   setuptools,
 }:
 
-buildPythonPackage rec {
+buildPythonPackage (finalAttrs: {
   pname = "django-guardian";
-  version = "3.2.0";
+  version = "3.3.3";
   pyproject = true;
 
   src = fetchFromGitHub {
     owner = "django-guardian";
     repo = "django-guardian";
-    tag = version;
-    hash = "sha256-imisHa5DOIQrQCEPWC/0EqPjDq12tR3xr0Dl1VifJoI=";
+    tag = finalAttrs.version;
+    hash = "sha256-0zUdcDeJ40AuYSzhjy3/htU43cy6T54rZOj2zFo6J+8=";
   };
 
   build-system = [ setuptools ];
@@ -36,9 +36,10 @@ buildPythonPackage rec {
   pythonImportsCheck = [ "guardian" ];
 
   meta = {
+    changelog = "https://github.com/django-guardian/django-guardian/releases/tag/${finalAttrs.src.tag}";
     description = "Per object permissions for Django";
     homepage = "https://github.com/django-guardian/django-guardian";
     license = lib.licenses.bsd2;
     maintainers = [ ];
   };
-}
+})