diff --git a/web/package-lock.json b/web/package-lock.json
index b8abe518fd2..44de8f92947 100644
--- a/web/package-lock.json
+++ b/web/package-lock.json
@@ -29,7 +29,7 @@
         "lodash": "^4.17.21",
         "mdast-util-find-and-replace": "^3.0.1",
         "next": "^14.2.35",
-        "npm": "^10.8.0",
+        "npm": "^10.9.9",
         "postcss": "^8.4.31",
         "prismjs": "^1.29.0",
         "react": "^18.3.1",
@@ -8012,9 +8012,9 @@
       }
     },
     "node_modules/npm": {
-      "version": "10.9.8",
-      "resolved": "https://registry.npmjs.org/npm/-/npm-10.9.8.tgz",
-      "integrity": "sha512-fYwb6ODSmHkqrJQQaCxY3M2lPf/mpgC7ik0HSzzIwG5CGtabRp4bNqikatvCoT42b5INQSqudVH0R7yVmC9hVg==",
+      "version": "10.9.9",
+      "resolved": "https://registry.npmjs.org/npm/-/npm-10.9.9.tgz",
+      "integrity": "sha512-1g+6jLQvaIuB4zwvHL7yrXuXcWZwDsCtBX8bbWDqbvJSSr9nPiDDWTHNgwXR27iIcTTW7v3A57hDW9RYv2W4Yg==",
       "bundleDependencies": [
         "@isaacs/string-locale-compare",
         "@npmcli/arborist",
@@ -8155,7 +8155,7 @@
         "spdx-expression-parse": "^4.0.0",
         "ssri": "^12.0.0",
         "supports-color": "^9.4.0",
-        "tar": "^7.5.11",
+        "tar": "^7.5.22",
         "text-table": "~0.2.0",
         "tiny-relative-date": "^1.3.0",
         "treeverse": "^3.0.0",
@@ -10100,7 +10100,7 @@
       }
     },
     "node_modules/npm/node_modules/tar": {
-      "version": "7.5.11",
+      "version": "7.5.22",
       "inBundle": true,
       "license": "BlueOak-1.0.0",
       "dependencies": {
diff --git a/web/package.json b/web/package.json
index f47495d3d87..bbcd70fa9ee 100644
--- a/web/package.json
+++ b/web/package.json
@@ -31,7 +31,7 @@
     "lodash": "^4.17.21",
     "mdast-util-find-and-replace": "^3.0.1",
     "next": "^14.2.35",
-    "npm": "^10.8.0",
+    "npm": "^10.9.9",
     "postcss": "^8.4.31",
     "prismjs": "^1.29.0",
     "react": "^18.3.1",