diff --git a/package.json b/package.json
index c5b12a2403..d5b3977e71 100644
--- a/package.json
+++ b/package.json
@@ -95,7 +95,7 @@
     "cheerio": "^1.2.0",
     "classnames": "^2.5.1",
     "dotenv": "^17.4.2",
-    "js-yaml": "^4.3.1",
+    "js-yaml": "^5.2.3",
     "jsonpointer": "^5.0.1",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e8031e9e44..847c658e9f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -74,8 +74,8 @@ importers:
         specifier: ^17.4.2
         version: 17.4.2
       js-yaml:
-        specifier: ^4.3.1
-        version: 4.3.1
+        specifier: ^5.2.3
+        version: 5.2.3
       jsonpointer:
         specifier: ^5.0.1
         version: 5.0.1
@@ -3412,6 +3412,10 @@ packages:
     resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
     hasBin: true
 
+  js-yaml@5.2.3:
+    resolution: {integrity: sha512-n+mUVyUX5bVv7G/G2zyIHOhdxfuU1dY2NOFzTQUWiMUbFss8b57NFlgCCaggU78wSw5KVS9cllzeLyzyR+n5nw==}
+    hasBin: true
+
   jsesc@3.1.0:
     resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
     engines: {node: '>=6'}
@@ -9133,6 +9137,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@5.2.3:
+    dependencies:
+      argparse: 2.0.1
+
   jsesc@3.1.0: {}
 
   json-buffer@3.0.1: {}