diff --git a/package.json b/package.json
index b580fc1..bc70d4a 100644
--- a/package.json
+++ b/package.json
@@ -30,7 +30,7 @@
     "@yarnpkg/lockfile": "1.1.0",
     "axios": "1.16.0",
     "debuglog": "1.0.1",
-    "js-yaml": "4.1.1",
+    "js-yaml": "4.2.0",
     "packageurl-js": "1.2.1",
     "semver": "7.7.4",
     "yargs": "17.7.2"