diff --git a/api/package.json b/api/package.json
index fcd353af575..f2d94513888 100644
--- a/api/package.json
+++ b/api/package.json
@@ -72,7 +72,7 @@
     "handlebars": "^4.7.7",
     "https-proxy-agent": "^7.0.6",
     "ioredis": "^5.3.2",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "jsonwebtoken": "^9.0.0",
     "jwks-rsa": "^3.2.0",
     "keyv": "^5.3.2",
diff --git a/package-lock.json b/package-lock.json
index 09c5219afbb..6d79a1dfbdb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -87,7 +87,7 @@
         "handlebars": "^4.7.7",
         "https-proxy-agent": "^7.0.6",
         "ioredis": "^5.3.2",
-        "js-yaml": "^4.1.1",
+        "js-yaml": "^4.2.0",
         "jsonwebtoken": "^9.0.0",
         "jwks-rsa": "^3.2.0",
         "keyv": "^5.3.2",
@@ -31374,9 +31374,19 @@
       "integrity": "sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ=="
     },
     "node_modules/js-yaml": {
-      "version": "4.1.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-      "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
+      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
@@ -44210,7 +44220,7 @@
         "google-auth-library": "^9.15.1",
         "https-proxy-agent": "^7.0.6",
         "ioredis": "^5.3.2",
-        "js-yaml": "^4.1.1",
+        "js-yaml": "^4.2.0",
         "jsonwebtoken": "^9.0.0",
         "keyv": "^5.3.2",
         "keyv-file": "^5.1.2",
@@ -46096,7 +46106,7 @@
       "dependencies": {
         "axios": "^1.13.5",
         "dayjs": "^1.11.13",
-        "js-yaml": "^4.1.1",
+        "js-yaml": "^4.2.0",
         "zod": "^3.22.4"
       },
       "devDependencies": {
diff --git a/packages/api/package.json b/packages/api/package.json
index e4ca4ef3c54..24f9c8925a4 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -104,7 +104,7 @@
     "google-auth-library": "^9.15.1",
     "https-proxy-agent": "^7.0.6",
     "ioredis": "^5.3.2",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "jsonwebtoken": "^9.0.0",
     "keyv": "^5.3.2",
     "keyv-file": "^5.1.2",
diff --git a/packages/data-provider/package.json b/packages/data-provider/package.json
index a707aef4488..74ac3fce11f 100644
--- a/packages/data-provider/package.json
+++ b/packages/data-provider/package.json
@@ -41,7 +41,7 @@
   "dependencies": {
     "axios": "^1.13.5",
     "dayjs": "^1.11.13",
-    "js-yaml": "^4.1.1",
+    "js-yaml": "^4.2.0",
     "zod": "^3.22.4"
   },
   "devDependencies": {