diff --git a/javascript/package-lock.json b/javascript/package-lock.json
index 06d7027a7..0ad7c5ba7 100644
--- a/javascript/package-lock.json
+++ b/javascript/package-lock.json
@@ -6441,9 +6441,9 @@
       "dev": true
     },
     "node_modules/yaml": {
-      "version": "2.3.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.3.3.tgz",
-      "integrity": "sha512-zw0VAJxgeZ6+++/su5AFoqBbZbrEakwu+X0M5HmcwUiBL7AzcuPKjj5we4xfQLp78LkEMpD0cOnUhmgOVy3KdQ==",
+      "version": "2.3.4",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.3.4.tgz",
+      "integrity": "sha512-8aAvwVUSHpfEqTQ4w/KMlf3HcRdt50E5ODIQJBw1fQ5RL34xabzxtUlzTXVqc4rkZsPbvrXKWnABCD7kWSmocA==",
       "engines": {
         "node": ">= 14"
       }
@@ -6555,7 +6555,7 @@
         "peer-id": "^0.16.0",
         "tmp-promise": "^3.0.3",
         "typescript": "^5.2.2",
-        "yaml": "^2.3.3"
+        "yaml": "^2.3.4"
       },
       "devDependencies": {
         "@types/chai": "^4.3.9",
@@ -6589,7 +6589,7 @@
         "chai": "^4.3.10",
         "deep-equal-in-any-order": "^2.0.6",
         "sinon": "^17.0.1",
-        "yaml": "^2.3.3"
+        "yaml": "^2.3.4"
       },
       "engines": {
         "node": ">=18"
diff --git a/javascript/packages/orchestrator/package.json b/javascript/packages/orchestrator/package.json
index 98e928fbf..8b6340ce0 100644
--- a/javascript/packages/orchestrator/package.json
+++ b/javascript/packages/orchestrator/package.json
@@ -55,7 +55,7 @@
     "peer-id": "^0.16.0",
     "tmp-promise": "^3.0.3",
     "typescript": "^5.2.2",
-    "yaml": "^2.3.3"
+    "yaml": "^2.3.4"
   },
   "devDependencies": {
     "@types/chai": "^4.3.9",
diff --git a/javascript/packages/utils/package.json b/javascript/packages/utils/package.json
index 15a70b8cf..9ff7ab682 100644
--- a/javascript/packages/utils/package.json
+++ b/javascript/packages/utils/package.json
@@ -46,7 +46,7 @@
     "chai": "^4.3.10",
     "deep-equal-in-any-order": "^2.0.6",
     "sinon": "^17.0.1",
-    "yaml": "^2.3.3"
+    "yaml": "^2.3.4"
   },
   "publishConfig": {
     "access": "public",