diff --git a/functions/otel-esm/package-lock.json b/functions/otel-esm/package-lock.json
index f7a15e2..3b3271b 100644
--- a/functions/otel-esm/package-lock.json
+++ b/functions/otel-esm/package-lock.json
@@ -28,7 +28,7 @@
         "@opentelemetry/sdk-logs": "0.205.0",
         "@opentelemetry/sdk-metrics": "2.1.0",
         "@opentelemetry/sdk-trace-node": "2.1.0",
-        "axios": "1.12.2"
+        "axios": "1.13.5"
       },
       "devDependencies": {
         "@types/node": "22.18.0",
@@ -885,13 +885,13 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.12.2",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.12.2.tgz",
-      "integrity": "sha512-vMJzPewAlRyOgxV2dU0Cuz2O8zzzx9VYtbJOaBgXFeLc4IV/Eg50n4LowmehOOR61S8ZMpc2K5Sa7g6A4jfkUw==",
+      "version": "1.13.5",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.13.5.tgz",
+      "integrity": "sha512-cz4ur7Vb0xS4/KUN0tPWe44eqxrIu31me+fbang3ijiNscE129POzipJJA6zniq2C/Z6sJCjMimjS8Lc/GAs8Q==",
       "license": "MIT",
       "dependencies": {
-        "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.4",
+        "follow-redirects": "^1.15.11",
+        "form-data": "^4.0.5",
         "proxy-from-env": "^1.1.0"
       }
     },
@@ -1579,9 +1579,9 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.4",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
-      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
+      "version": "4.0.5",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.5.tgz",
+      "integrity": "sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
diff --git a/functions/otel-esm/package.json b/functions/otel-esm/package.json
index cabc2f4..f8282ab 100644
--- a/functions/otel-esm/package.json
+++ b/functions/otel-esm/package.json
@@ -30,7 +30,7 @@
     "@opentelemetry/sdk-logs": "0.205.0",
     "@opentelemetry/sdk-metrics": "2.1.0",
     "@opentelemetry/sdk-trace-node": "2.1.0",
-    "axios": "1.12.2"
+    "axios": "1.13.5"
   },
   "devDependencies": {
     "@types/node": "22.18.0",