diff --git a/package-lock.json b/package-lock.json
index 853f9c3b..30095216 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -28,7 +28,7 @@
         "static-server": "^2.2.1",
         "tar": "^6.2.1",
         "wav-decoder": "^1.3.0",
-        "yaml": "^2.5.1"
+        "yaml": "^2.8.4"
       },
       "devDependencies": {
         "@nextcloud/axios": "^2.4.0",
@@ -20206,9 +20206,9 @@
       "peer": true
     },
     "node_modules/yaml": {
-      "version": "2.8.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
-      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
+      "version": "2.8.4",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.4.tgz",
+      "integrity": "sha512-ml/JPOj9fOQK8RNnWojA67GbZ0ApXAUlN2UQclwv2eVgTgn7O9gg9o7paZWKMp4g0H3nTLtS9LVzhkpOFIKzog==",
       "license": "ISC",
       "bin": {
         "yaml": "bin.mjs"
diff --git a/package.json b/package.json
index d916bfcb..944fc6cf 100644
--- a/package.json
+++ b/package.json
@@ -43,7 +43,7 @@
     "static-server": "^2.2.1",
     "tar": "^6.2.1",
     "wav-decoder": "^1.3.0",
-    "yaml": "^2.5.1"
+    "yaml": "^2.8.4"
   },
   "devDependencies": {
     "@nextcloud/axios": "^2.4.0",