diff --git a/package.json b/package.json
index f2e88e2c1..3c843b8bc 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "gamedig": "^5.3.3",
     "i18next": "^26.3.6",
     "ical.js": "^2.2.1",
-    "js-yaml": "^5.3.0",
+    "js-yaml": "^5.4.0",
     "json-rpc-2.0": "^1.7.1",
     "luxon": "^3.7.2",
     "memory-cache": "^0.2.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5dc93f656..8a6bbfc9c 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -36,8 +36,8 @@ importers:
         specifier: ^2.2.1
         version: 2.2.1
       js-yaml:
-        specifier: ^5.3.0
-        version: 5.3.0
+        specifier: ^5.4.0
+        version: 5.4.0
       json-rpc-2.0:
         specifier: ^1.7.1
         version: 1.7.1
@@ -2549,8 +2549,8 @@ packages:
     resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
     hasBin: true
 
-  js-yaml@5.3.0:
-    resolution: {integrity: sha512-muutsYr+e2+d3rTgUGslq5rxbBlUy3cJ61IsHag2QNDQV+7zXWjkUpmALIajhrlLlrgRUiymj6U3zUr/TMK84Q==}
+  js-yaml@5.4.0:
+    resolution: {integrity: sha512-jE7vUJIebKzYQI5xu4co5CRBDlDEYnHrdzsxs4O2giCz4v2SbVMYKpmt1D9L38OKQAeCWmrOTRiCV93u0UkaJA==}
     hasBin: true
 
   jsdom@30.0.1:
@@ -4428,7 +4428,7 @@ snapshots:
       form-data: 4.0.6
       hpagent: 1.2.0
       isomorphic-ws: 5.0.0(ws@8.21.2)
-      js-yaml: 5.3.0
+      js-yaml: 5.4.0
       jsonpath-plus: 10.4.0
       openid-client: 6.8.5
       rfc4648: 1.5.4
@@ -6354,7 +6354,7 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
-  js-yaml@5.3.0:
+  js-yaml@5.4.0:
     dependencies:
       argparse: 2.0.1