diff --git a/package.json b/package.json
index d0ab32f18..8e0f25bdd 100644
--- a/package.json
+++ b/package.json
@@ -86,7 +86,7 @@
     ]
   },
   "dependencies": {
-    "js-yaml": "^5.2.1",
+    "js-yaml": "^5.2.2",
     "zod": "^4.4.3"
   },
   "scarfSettings": {
diff --git a/packages/backend/package.json b/packages/backend/package.json
index 407387eef..af1c385d9 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -118,7 +118,7 @@
     "express": "^5.2.1",
     "express-openapi-validator": "^5.6.2",
     "isomorphic-git": "^1.38.7",
-    "js-yaml": "^5.2.1",
+    "js-yaml": "^5.2.2",
     "mustache": "^4.2.0",
     "openai": "^6.48.0",
     "postman-code-generators": "^1.14.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0d9a5fb54..bc0eb75ea 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -15,8 +15,8 @@ importers:
   .:
     dependencies:
       js-yaml:
-        specifier: ^5.2.1
-        version: 5.2.1
+        specifier: ^5.2.2
+        version: 5.2.2
       zod:
         specifier: ^4.4.3
         version: 4.4.3
@@ -145,8 +145,8 @@ importers:
         specifier: ^1.38.7
         version: 1.38.7
       js-yaml:
-        specifier: ^5.2.1
-        version: 5.2.1
+        specifier: ^5.2.2
+        version: 5.2.2
       mustache:
         specifier: ^4.2.0
         version: 4.2.0
@@ -3528,8 +3528,8 @@ packages:
     resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
-  js-yaml@5.2.1:
-    resolution: {integrity: sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==}
+  js-yaml@5.2.2:
+    resolution: {integrity: sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==}
     hasBin: true
 
   jsdom@29.1.1:
@@ -8369,7 +8369,7 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
-  js-yaml@5.2.1:
+  js-yaml@5.2.2:
     dependencies:
       argparse: 2.0.1