diff --git a/package.json b/package.json
index de5e99fb7..f079a9497 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "gamedig": "^5.3.3",
     "i18next": "^26.3.6",
     "ical.js": "^2.2.1",
-    "js-yaml": "^5.4.1",
+    "js-yaml": "^5.4.2",
     "json-rpc-2.0": "^1.7.1",
     "luxon": "^3.7.2",
     "memory-cache": "^0.2.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 27c0408eb..58e45faaa 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -36,8 +36,8 @@ importers:
         specifier: ^2.2.1
         version: 2.2.1
       js-yaml:
-        specifier: ^5.4.1
-        version: 5.4.1
+        specifier: ^5.4.2
+        version: 5.4.2
       json-rpc-2.0:
         specifier: ^1.7.1
         version: 1.7.1
@@ -2481,8 +2481,8 @@ packages:
     resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
     hasBin: true
 
-  js-yaml@5.4.1:
-    resolution: {integrity: sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==}
+  js-yaml@5.4.2:
+    resolution: {integrity: sha512-m+aqu+LwO1O6sIopafj8HUVl5aawITwZQe/yHpMCKjaWBaA/d07B/QdMb3529REftiU+RMMHL3Vlsw3hON7vWg==}
     hasBin: true
 
   jsdom@30.0.1:
@@ -4359,7 +4359,7 @@ snapshots:
       form-data: 4.0.6
       hpagent: 1.2.0
       isomorphic-ws: 5.0.0(ws@8.21.2)
-      js-yaml: 5.4.1
+      js-yaml: 5.4.2
       jsonpath-plus: 10.4.0
       openid-client: 6.8.5
       rfc4648: 1.5.4
@@ -6263,7 +6263,7 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
-  js-yaml@5.4.1:
+  js-yaml@5.4.2:
     dependencies:
       argparse: 2.0.1