diff --git a/package-lock.json b/package-lock.json
index 45d2be76..73618884 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -7010,9 +7010,9 @@
       "license": "ISC"
     },
     "node_modules/graphql": {
-      "version": "16.14.0",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.14.0.tgz",
-      "integrity": "sha512-BBvQ/406p+4CZbTpCbVPSxfzrZrbnuWSP1ELYgyS6B+hNeKzgrdB4JczCa5VZUBQrDa9hUngm0KnexY6pJRN5Q==",
+      "version": "16.14.2",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.14.2.tgz",
+      "integrity": "sha512-Chq1s4CY7jmh8gO2qvLIJyfCDIN+EHLFW/9iShnp1z8FjBQMoodWP1kDC36VAMXXIvAjj4ARa7ntfAV2BrjsbA==",
       "dev": true,
       "license": "MIT",
       "engines": {
@@ -11688,7 +11688,7 @@
         "@types/mocha": "^10.0.10",
         "@types/sinon": "^22.0.0",
         "chai": "^6.2.2",
-        "graphql": "^16.14.0",
+        "graphql": "^17.0.0",
         "mocha": "^11.7.6",
         "nock": "^14.0.16",
         "nodemon": "^3.1.14",
@@ -11701,6 +11701,16 @@
         "node": ">= 24"
       }
     },
+    "packages/app/node_modules/graphql": {
+      "version": "17.0.2",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-17.0.2.tgz",
+      "integrity": "sha512-FRWbddMxfkjiB7z+aQDWIR+E34xo9I8c9mtK2RPv8PmMzKRvrdsreHL/Ui/TmwHJfhHChEtsFPyMHKI+xuarQQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^22.0.0 || ^24.0.0 || ^25.0.0 || >=26.0.0"
+      }
+    },
     "packages/app/node_modules/yaml": {
       "version": "2.9.0",
       "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
diff --git a/packages/app/package.json b/packages/app/package.json
index d3ba00d4..0ae291af 100644
--- a/packages/app/package.json
+++ b/packages/app/package.json
@@ -69,7 +69,7 @@
     "@types/mocha": "^10.0.10",
     "@types/sinon": "^22.0.0",
     "chai": "^6.2.2",
-    "graphql": "^16.14.0",
+    "graphql": "^17.0.0",
     "mocha": "^11.7.6",
     "nock": "^14.0.16",
     "nodemon": "^3.1.14",