diff --git a/vendor/cel.dev/expr/MODULE.bazel b/vendor/cel.dev/expr/MODULE.bazel
index 85ac9ff617e..5211146356f 100644
--- a/vendor/cel.dev/expr/MODULE.bazel
+++ b/vendor/cel.dev/expr/MODULE.bazel
@@ -30,7 +30,7 @@ bazel_dep(
 )
 bazel_dep(
     name = "protobuf",
-    version = "27.0",
+    version = "33.5",
     repo_name = "com_google_protobuf",
 )
 bazel_dep(
diff --git a/vendor/cel.dev/expr/WORKSPACE b/vendor/cel.dev/expr/WORKSPACE
index b6dc9ed6730..1ad995a5210 100644
--- a/vendor/cel.dev/expr/WORKSPACE
+++ b/vendor/cel.dev/expr/WORKSPACE
@@ -40,9 +40,9 @@ http_archive(
 # protobuf
 http_archive(
     name = "com_google_protobuf",
-    sha256 = "8242327e5df8c80ba49e4165250b8f79a76bd11765facefaaecfca7747dc8da2",
-    strip_prefix = "protobuf-3.21.5",
-    urls = ["https://github.com/protocolbuffers/protobuf/archive/v3.21.5.zip"],
+    sha256 = "33ec69e8c00825f1a5deb9b0e43b2b0c15b7f8f53968e9cd7ab35c93932f75d2",
+    strip_prefix = "protobuf-33.4",
+    urls = ["https://github.com/protocolbuffers/protobuf/archive/v33.4.zip"],
 )
 
 # googletest