diff --git a/Chart.yaml b/Chart.yaml
index 8b27f671a..388eb03e4 100644
--- a/Chart.yaml
+++ b/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v1
 name: harbor
-version: 1.13.3
-appVersion: 2.9.3
+version: 1.13.4
+appVersion: 2.9.4
 description: An open source trusted cloud native registry that stores, signs, and scans content
 keywords:
 - docker
diff --git a/values.yaml b/values.yaml
index 6d271652c..e2c44a3a3 100644
--- a/values.yaml
+++ b/values.yaml
@@ -379,7 +379,7 @@ enableMigrateHelmHook: false
 nginx:
   image:
     repository: goharbor/nginx-photon
-    tag: v2.9.3
+    tag: v2.9.4
   # set the service account to be used, default if left empty
   serviceAccountName: ""
   # mount the service account token
@@ -410,7 +410,7 @@ nginx:
 portal:
   image:
     repository: goharbor/harbor-portal
-    tag: v2.9.3
+    tag: v2.9.4
   # set the service account to be used, default if left empty
   serviceAccountName: ""
   # mount the service account token
@@ -441,7 +441,7 @@ portal:
 core:
   image:
     repository: goharbor/harbor-core
-    tag: v2.9.3
+    tag: v2.9.4
   # set the service account to be used, default if left empty
   serviceAccountName: ""
   # mount the service account token
@@ -513,7 +513,7 @@ core:
 jobservice:
   image:
     repository: goharbor/harbor-jobservice
-    tag: v2.9.3
+    tag: v2.9.4
   replicas: 1
   revisionHistoryLimit: 10
   # set the service account to be used, default if left empty
@@ -570,7 +570,7 @@ registry:
   registry:
     image:
       repository: goharbor/registry-photon
-      tag: v2.9.3
+      tag: v2.9.4
     # resources:
     #  requests:
     #    memory: 256Mi
@@ -579,7 +579,7 @@ registry:
   controller:
     image:
       repository: goharbor/harbor-registryctl
-      tag: v2.9.3
+      tag: v2.9.4
 
     # resources:
     #  requests:
@@ -645,7 +645,7 @@ trivy:
     # repository the repository for Trivy adapter image
     repository: goharbor/trivy-adapter-photon
     # tag the tag for Trivy adapter image
-    tag: v2.9.3
+    tag: v2.9.4
   # set the service account to be used, default if left empty
   serviceAccountName: ""
   # mount the service account token
@@ -735,7 +735,7 @@ database:
     automountServiceAccountToken: false
     image:
       repository: goharbor/harbor-db
-      tag: v2.9.3
+      tag: v2.9.4
     # The initial superuser password for internal database
     password: "changeit"
     # The size limit for Shared memory, pgSQL use it for shared_buffer
@@ -808,7 +808,7 @@ redis:
     automountServiceAccountToken: false
     image:
       repository: goharbor/redis-photon
-      tag: v2.9.3
+      tag: v2.9.4
     # resources:
     #  requests:
     #    memory: 256Mi
@@ -872,7 +872,7 @@ exporter:
   automountServiceAccountToken: false
   image:
     repository: goharbor/harbor-exporter
-    tag: v2.9.3
+    tag: v2.9.4
   nodeSelector: {}
   tolerations: []
   affinity: {}