diff --git a/package-lock.json b/package-lock.json
index ec66259f8..eaf242797 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "@actions/core": "^3.0.1",
         "@actions/github": "^9.1.1",
         "@octokit/plugin-retry": "^8.1.0",
-        "js-yaml": "^5.1.0",
+        "js-yaml": "^5.2.2",
         "minimatch": "^10.2.5"
       },
       "devDependencies": {
@@ -4549,9 +4549,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "5.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.1.0.tgz",
-      "integrity": "sha512-s8VA5jkR8f22S3NAXmhKPFqGUduqZGlsufabVOgN14iTdw/RXcym7bKkbwjxLK9Yw2lEvvmJjFp119+KPeo8Kg==",
+      "version": "5.2.2",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.2.tgz",
+      "integrity": "sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==",
       "funding": [
         {
           "type": "github",
diff --git a/package.json b/package.json
index a112779cd..820e5ac3c 100644
--- a/package.json
+++ b/package.json
@@ -31,7 +31,7 @@
     "@actions/core": "^3.0.1",
     "@actions/github": "^9.1.1",
     "@octokit/plugin-retry": "^8.1.0",
-    "js-yaml": "^5.1.0",
+    "js-yaml": "^5.2.2",
     "minimatch": "^10.2.5"
   },
   "devDependencies": {