diff --git a/extras/agc-minimal-permissions/package-lock.json b/extras/agc-minimal-permissions/package-lock.json
index 178e45aa..95ff79cc 100644
--- a/extras/agc-minimal-permissions/package-lock.json
+++ b/extras/agc-minimal-permissions/package-lock.json
@@ -16,7 +16,7 @@
         "constructs": "^10.1.152",
         "minimatch": ">=3.0.5",
         "source-map-support": "^0.5.20",
-        "vm2": ">=3.9.11"
+        "vm2": ">=3.9.19"
       },
       "bin": {
         "permissions": "bin/permissions.js"
@@ -4728,9 +4728,10 @@
       }
     },
     "node_modules/vm2": {
-      "version": "3.9.11",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.11.tgz",
-      "integrity": "sha512-PFG8iJRSjvvBdisowQ7iVF580DXb1uCIiGaXgm7tynMR1uTBlv7UJlB1zdv5KJ+Tmq1f0Upnj3fayoEOPpCBKg==",
+      "version": "3.9.19",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.19.tgz",
+      "integrity": "sha512-J637XF0DHDMV57R6JyVsTak7nIL8gy5KH4r1HiwWLf/4GBbb5MKL5y7LpmF4A8E2nR6XmzpmMFQ7V7ppPTmUQg==",
+      "deprecated": "The library contains critical security issues and should not be used for production! The maintenance of the project has been discontinued. Consider migrating your code to isolated-vm.",
       "dependencies": {
         "acorn": "^8.7.0",
         "acorn-walk": "^8.2.0"
@@ -8522,9 +8523,9 @@
       }
     },
     "vm2": {
-      "version": "3.9.11",
-      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.11.tgz",
-      "integrity": "sha512-PFG8iJRSjvvBdisowQ7iVF580DXb1uCIiGaXgm7tynMR1uTBlv7UJlB1zdv5KJ+Tmq1f0Upnj3fayoEOPpCBKg==",
+      "version": "3.9.19",
+      "resolved": "https://registry.npmjs.org/vm2/-/vm2-3.9.19.tgz",
+      "integrity": "sha512-J637XF0DHDMV57R6JyVsTak7nIL8gy5KH4r1HiwWLf/4GBbb5MKL5y7LpmF4A8E2nR6XmzpmMFQ7V7ppPTmUQg==",
       "requires": {
         "acorn": "^8.7.0",
         "acorn-walk": "^8.2.0"
diff --git a/extras/agc-minimal-permissions/package.json b/extras/agc-minimal-permissions/package.json
index 69507fd1..a6c5e8e0 100644
--- a/extras/agc-minimal-permissions/package.json
+++ b/extras/agc-minimal-permissions/package.json
@@ -30,6 +30,6 @@
     "constructs": "^10.1.152",
     "minimatch": ">=3.0.5",
     "source-map-support": "^0.5.20",
-    "vm2": ">=3.9.11"
+    "vm2": ">=3.9.19"
   }
 }