diff --git a/applications/gafaelfawr/README.md b/applications/gafaelfawr/README.md
index 51df4c45c1..39c62850a4 100644
--- a/applications/gafaelfawr/README.md
+++ b/applications/gafaelfawr/README.md
@@ -18,7 +18,7 @@ Authentication and identity system
 | cloudsql.image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Cloud SQL Auth Proxy images |
 | cloudsql.image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Auth Proxy image to use |
 | cloudsql.image.schemaUpdateTagSuffix | string | `"-alpine"` | Tag suffix to use for the proxy for schema updates |
-| cloudsql.image.tag | string | `"1.37.1"` | Cloud SQL Auth Proxy tag to use |
+| cloudsql.image.tag | string | `"1.37.2"` | Cloud SQL Auth Proxy tag to use |
 | cloudsql.instanceConnectionName | string | None, must be set if Cloud SQL Auth Proxy is enabled | Instance connection name for a Cloud SQL PostgreSQL instance |
 | cloudsql.nodeSelector | object | `{}` | Node selection rules for the Cloud SQL Proxy pod |
 | cloudsql.podAnnotations | object | `{}` | Annotations for the Cloud SQL Proxy pod |
diff --git a/applications/gafaelfawr/values.yaml b/applications/gafaelfawr/values.yaml
index 95820eabb6..d51d343ee3 100644
--- a/applications/gafaelfawr/values.yaml
+++ b/applications/gafaelfawr/values.yaml
@@ -311,7 +311,7 @@ cloudsql:
     repository: "gcr.io/cloudsql-docker/gce-proxy"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
     # -- Tag suffix to use for the proxy for schema updates
     schemaUpdateTagSuffix: "-alpine"
diff --git a/applications/nublado/README.md b/applications/nublado/README.md
index 1ecc7508f2..0dff4471ee 100644
--- a/applications/nublado/README.md
+++ b/applications/nublado/README.md
@@ -17,7 +17,7 @@ JupyterHub and custom spawner for the Rubin Science Platform
 | cloudsql.image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Cloud SQL Auth Proxy images |
 | cloudsql.image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Auth Proxy image to use |
 | cloudsql.image.resources | object | See `values.yaml` | Resource requests and limits for Cloud SQL pod |
-| cloudsql.image.tag | string | `"1.37.1"` | Cloud SQL Auth Proxy tag to use |
+| cloudsql.image.tag | string | `"1.37.2"` | Cloud SQL Auth Proxy tag to use |
 | cloudsql.instanceConnectionName | string | None, must be set if Cloud SQL Auth Proxy is enabled | Instance connection name for a Cloud SQL PostgreSQL instance |
 | cloudsql.nodeSelector | object | `{}` | Node selection rules for the Cloud SQL Auth Proxy pod |
 | cloudsql.podAnnotations | object | `{}` | Annotations for the Cloud SQL Auth Proxy pod |
diff --git a/applications/nublado/values.yaml b/applications/nublado/values.yaml
index 79049d8170..524c7c7788 100644
--- a/applications/nublado/values.yaml
+++ b/applications/nublado/values.yaml
@@ -585,7 +585,7 @@ cloudsql:
     pullPolicy: "IfNotPresent"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
   # -- Instance connection name for a Cloud SQL PostgreSQL instance
   # @default -- None, must be set if Cloud SQL Auth Proxy is enabled
diff --git a/applications/sqlproxy-cross-project/README.md b/applications/sqlproxy-cross-project/README.md
index 74b079d5d9..cc9e12ac31 100644
--- a/applications/sqlproxy-cross-project/README.md
+++ b/applications/sqlproxy-cross-project/README.md
@@ -19,7 +19,7 @@ GCP SQL Proxy as a service
 | fullnameOverride | string | `""` | Override the full name for resources (includes the release name) |
 | image.pullPolicy | string | `"IfNotPresent"` | Pull policy for the Cloud SQL Proxy image |
 | image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Proxy image to use |
-| image.tag | string | `"1.37.1"` | Tag of Cloud SQL Proxy image to use |
+| image.tag | string | `"1.37.2"` | Tag of Cloud SQL Proxy image to use |
 | nameOverride | string | `""` | Override the base name for resources |
 | nodeSelector | object | `{}` | Node selector rules for the Cloud SQL Proxy pod |
 | podAnnotations | object | `{}` | Annotations for the Cloud SQL Proxy pod |
diff --git a/applications/sqlproxy-cross-project/values.yaml b/applications/sqlproxy-cross-project/values.yaml
index ac677e8060..46d9ed7585 100644
--- a/applications/sqlproxy-cross-project/values.yaml
+++ b/applications/sqlproxy-cross-project/values.yaml
@@ -14,7 +14,7 @@ image:
   repository: "gcr.io/cloudsql-docker/gce-proxy"
 
   # -- Tag of Cloud SQL Proxy image to use
-  tag: "1.37.1"
+  tag: "1.37.2"
 
   # -- Pull policy for the Cloud SQL Proxy image
   pullPolicy: "IfNotPresent"
diff --git a/applications/times-square/README.md b/applications/times-square/README.md
index 366950ca28..3339c5b90e 100644
--- a/applications/times-square/README.md
+++ b/applications/times-square/README.md
@@ -19,7 +19,7 @@ An API service for managing and rendering parameterized Jupyter notebooks.
 | cloudsql.image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Cloud SQL Auth Proxy images |
 | cloudsql.image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Auth Proxy image to use |
 | cloudsql.image.resources | object | see `values.yaml` | Resource requests and limits for Cloud SQL pod |
-| cloudsql.image.tag | string | `"1.37.1"` | Cloud SQL Auth Proxy tag to use |
+| cloudsql.image.tag | string | `"1.37.2"` | Cloud SQL Auth Proxy tag to use |
 | cloudsql.instanceConnectionName | string | `""` | Instance connection name for a Cloud SQL PostgreSQL instance |
 | cloudsql.serviceAccount | string | `""` | The Google service account that has an IAM binding to the `times-square` Kubernetes service accounts and has the `cloudsql.client` role |
 | config.databaseUrl | string | None, must be set | URL for the PostgreSQL database |
diff --git a/applications/times-square/values.yaml b/applications/times-square/values.yaml
index f5509e689f..cfe2ff9d4c 100644
--- a/applications/times-square/values.yaml
+++ b/applications/times-square/values.yaml
@@ -156,7 +156,7 @@ cloudsql:
     repository: "gcr.io/cloudsql-docker/gce-proxy"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
     # -- Pull policy for Cloud SQL Auth Proxy images
     pullPolicy: "IfNotPresent"
diff --git a/applications/vo-cutouts/README.md b/applications/vo-cutouts/README.md
index 97213c69f0..0a51e70249 100644
--- a/applications/vo-cutouts/README.md
+++ b/applications/vo-cutouts/README.md
@@ -14,7 +14,7 @@ Image cutout service complying with IVOA SODA
 | cloudsql.image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Cloud SQL Auth Proxy images |
 | cloudsql.image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Auth Proxy image to use |
 | cloudsql.image.schemaUpdateTagSuffix | string | `"-alpine"` | Tag suffix to use for the proxy for schema updates |
-| cloudsql.image.tag | string | `"1.37.1"` | Cloud SQL Auth Proxy tag to use |
+| cloudsql.image.tag | string | `"1.37.2"` | Cloud SQL Auth Proxy tag to use |
 | cloudsql.instanceConnectionName | string | None, must be set if Cloud SQL is used | Instance connection name for a Cloud SQL PostgreSQL instance |
 | cloudsql.resources | object | See `values.yaml` | Resource limits and requests for the Cloud SQL Proxy container |
 | config.databaseUrl | string | None, must be set if `cloudsql.enabled` is false | URL for the PostgreSQL database if Cloud SQL is not in use |
diff --git a/applications/vo-cutouts/values.yaml b/applications/vo-cutouts/values.yaml
index 199c0ce730..40e4a9aa56 100644
--- a/applications/vo-cutouts/values.yaml
+++ b/applications/vo-cutouts/values.yaml
@@ -94,7 +94,7 @@ cloudsql:
     repository: "gcr.io/cloudsql-docker/gce-proxy"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
     # -- Tag suffix to use for the proxy for schema updates
     schemaUpdateTagSuffix: "-alpine"
diff --git a/charts/cadc-tap/README.md b/charts/cadc-tap/README.md
index 8adaa4f4fd..d66a03be28 100644
--- a/charts/cadc-tap/README.md
+++ b/charts/cadc-tap/README.md
@@ -17,7 +17,7 @@ IVOA TAP service
 | cloudsql.enabled | bool | `false` | Enable the Cloud SQL Auth Proxy sidecar, used with Cloud SQL databases on Google Cloud |
 | cloudsql.image.pullPolicy | string | `"IfNotPresent"` | Pull policy for Cloud SQL Auth Proxy images |
 | cloudsql.image.repository | string | `"gcr.io/cloudsql-docker/gce-proxy"` | Cloud SQL Auth Proxy image to use |
-| cloudsql.image.tag | string | `"1.37.1"` | Cloud SQL Auth Proxy tag to use |
+| cloudsql.image.tag | string | `"1.37.2"` | Cloud SQL Auth Proxy tag to use |
 | cloudsql.instanceConnectionName | string | `""` | Instance connection name for a Cloud SQL PostgreSQL instance |
 | cloudsql.resources | object | See `values.yaml` | Resource limits and requests for the Cloud SQL Proxy container |
 | cloudsql.serviceAccount | string | None, must be set | The Google service account that has an IAM binding to the `cadc-tap` Kubernetes service accounts and has the `cloudsql.client` role, access |
diff --git a/charts/cadc-tap/values.yaml b/charts/cadc-tap/values.yaml
index a755e17f89..e54ff5e156 100644
--- a/charts/cadc-tap/values.yaml
+++ b/charts/cadc-tap/values.yaml
@@ -229,7 +229,7 @@ cloudsql:
     repository: "gcr.io/cloudsql-docker/gce-proxy"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
     # -- Pull policy for Cloud SQL Auth Proxy images
     pullPolicy: "IfNotPresent"
diff --git a/starters/fastapi-safir-uws/values.yaml b/starters/fastapi-safir-uws/values.yaml
index 44d1783c3b..8a08de91f7 100644
--- a/starters/fastapi-safir-uws/values.yaml
+++ b/starters/fastapi-safir-uws/values.yaml
@@ -86,7 +86,7 @@ cloudsql:
     repository: "gcr.io/cloudsql-docker/gce-proxy"
 
     # -- Cloud SQL Auth Proxy tag to use
-    tag: "1.37.1"
+    tag: "1.37.2"
 
     # -- Pull policy for Cloud SQL Auth Proxy images
     pullPolicy: "IfNotPresent"