diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2b89e4e56a..289c696e31 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Hardened the validation of the date in the endpoint to create an account balance
 - Upgraded `bootstrap` from version `4.6.2` to `5.3.8`
+- Upgraded `stripe` from version `22.6.2` to `23.0.0`
 
 ### Fixed
 
diff --git a/apps/api/src/app/subscription/subscription.service.ts b/apps/api/src/app/subscription/subscription.service.ts
index 212fade0f6..b46d385432 100644
--- a/apps/api/src/app/subscription/subscription.service.ts
+++ b/apps/api/src/app/subscription/subscription.service.ts
@@ -38,7 +38,7 @@ export class SubscriptionService {
       this.stripe = new Stripe(
         this.configurationService.get('STRIPE_SECRET_KEY'),
         {
-          apiVersion: '2026-08-26.dahlia'
+          apiVersion: '2026-09-30.endive'
         }
       );
     }
@@ -80,6 +80,7 @@ export class SubscriptionService {
 
     const stripeCheckoutSessionCreateParams: Stripe.Checkout.SessionCreateParams =
       {
+        allowed_payment_method_types: ['card'],
         cancel_url: `${this.configurationService.get('ROOT_URL')}/${
           user.settings.settings.language
         }/account`,
@@ -93,7 +94,6 @@ export class SubscriptionService {
         locale: this.getStripeLocale(user.settings?.settings?.language),
         metadata: { subscriptionOffer: JSON.stringify(subscriptionOffer) },
         mode: 'payment',
-        payment_method_types: ['card'],
         success_url: `${this.configurationService.get(
           'ROOT_URL'
         )}/api/v1/subscription/stripe/callback?checkoutSessionId={CHECKOUT_SESSION_ID}`
diff --git a/package-lock.json b/package-lock.json
index d1ee75dae2..48886d4ecd 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -100,7 +100,7 @@
         "passport-openidconnect": "0.1.2",
         "reflect-metadata": "0.2.2",
         "rxjs": "7.8.1",
-        "stripe": "22.6.2",
+        "stripe": "23.0.0",
         "svgmap": "2.21.0",
         "tablemark": "4.1.0",
         "twitter-api-v2": "1.29.1",
@@ -32699,15 +32699,15 @@
       }
     },
     "node_modules/stripe": {
-      "version": "22.6.2",
-      "resolved": "https://registry.npmjs.org/stripe/-/stripe-22.6.2.tgz",
-      "integrity": "sha512-PwRE2scocvXqDKPiskMa5vRJEAEkq46W69XyUYmAwrNSLr675lQnfqLwnsndAWizwgihOWw/irLmoFRo3ez7ew==",
+      "version": "23.0.0",
+      "resolved": "https://registry.npmjs.org/stripe/-/stripe-23.0.0.tgz",
+      "integrity": "sha512-MDE2A5ZVVluYURORaZEVghSmnLJc3w6aHAlZSxDQMsOjOb3V0O6ro/CiaeFlJS4N7uIVmsg98ocRsPmUK6YfyA==",
       "license": "MIT",
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       },
       "peerDependencies": {
-        "@types/node": ">=18"
+        "@types/node": ">=20"
       },
       "peerDependenciesMeta": {
         "@types/node": {
diff --git a/package.json b/package.json
index fa025dd17e..186467d62b 100644
--- a/package.json
+++ b/package.json
@@ -144,7 +144,7 @@
     "passport-openidconnect": "0.1.2",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.1",
-    "stripe": "22.6.2",
+    "stripe": "23.0.0",
     "svgmap": "2.21.0",
     "tablemark": "4.1.0",
     "twitter-api-v2": "1.29.1",