diff --git a/package-lock.json b/package-lock.json
index 3fd4a417..dc05f8b2 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10352,7 +10352,7 @@
         "@sinonjs/fake-timers": "^15.4.0",
         "@types/node": "^25.0.0",
         "assert-never": "^1.4.0",
-        "js-yaml": "^5.2.1",
+        "js-yaml": "^5.4.1",
         "tslib": "^2.8.1"
       },
       "devDependencies": {
@@ -10403,9 +10403,9 @@
       }
     },
     "packages/stream-test/node_modules/js-yaml": {
-      "version": "5.2.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.2.1.tgz",
-      "integrity": "sha512-zfLtNfQqxVqq3uaTqSkh4x4hZw3KHobGUA0fJUj4wawW8bsQLTVqpHdXSIzidh7o+4lEW36tANuAGdaFx6Zgnw==",
+      "version": "5.4.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-5.4.1.tgz",
+      "integrity": "sha512-28R/k+NAjeuf7+CKlTxWZVExJGwVVLwY06DgEnOMz2gEpfNkDcD7QvyiVPT0xy0XXhU8vHsd4Ot42OOPdJG7dQ==",
       "funding": [
         {
           "type": "github",
diff --git a/packages/stream-test/package.json b/packages/stream-test/package.json
index 59ee884d..fbb9fa89 100644
--- a/packages/stream-test/package.json
+++ b/packages/stream-test/package.json
@@ -32,7 +32,7 @@
     "@sinonjs/fake-timers": "^15.4.0",
     "@types/node": "^25.0.0",
     "assert-never": "^1.4.0",
-    "js-yaml": "^5.2.1",
+    "js-yaml": "^5.4.1",
     "tslib": "^2.8.1"
   }
 }