diff --git a/apps/web/package-lock.json b/apps/web/package-lock.json
index e9e6998..5452e72 100644
--- a/apps/web/package-lock.json
+++ b/apps/web/package-lock.json
@@ -1940,9 +1940,9 @@
       "license": "MIT"
     },
     "node_modules/nanoid": {
-      "version": "3.3.17",
-      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.17.tgz",
-      "integrity": "sha512-xQLf0A3HOMlgHq0n247/LRuAOYmB7dXJ/DvAxGvsSBij45XtBSmQycu+F8ODbHwns/XyFZagyL1+J0Offw1E0g==",
+      "version": "3.3.18",
+      "resolved": "https://registry.npmjs.org/nanoid/-/nanoid-3.3.18.tgz",
+      "integrity": "sha512-DTg4MJbGMWkfi6VZFdNt2/caMbQy4Ou+Op/hJQvGEWcnVfoA1QA+xzRKAzw9jD6+GVOOeYr/mIcuDSdug6F6+w==",
       "funding": [
         {
           "type": "github",
diff --git a/scripts/validate.py b/scripts/validate.py
index 3563d46..508ae1f 100644
--- a/scripts/validate.py
+++ b/scripts/validate.py
@@ -151,6 +151,7 @@ def main() -> int:
         run(pytest_command(uv))
 
         sync_frontend_dependencies(npm)
+        run([npm, "audit", "--audit-level=high"], cwd=WEB_ROOT)
         run([npm, "run", "lint"], cwd=WEB_ROOT)
         run([npm, "run", "build"], cwd=WEB_ROOT)
     except (RuntimeError, subprocess.CalledProcessError) as error: