diff --git a/package.json b/package.json
index b566544462..942a0c86d0 100644
--- a/package.json
+++ b/package.json
@@ -95,7 +95,7 @@
     "cheerio": "^1.2.0",
     "classnames": "^2.5.1",
     "dotenv": "^17.4.2",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^5.2.2",
     "jsonpointer": "^5.0.1",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b09a4e2a37..8c3ea6ae77 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -74,8 +74,8 @@ importers:
         specifier: ^17.4.2
         version: 17.4.2
       js-yaml:
-        specifier: ^4.3.0
-        version: 4.3.0
+        specifier: ^5.2.2
+        version: 5.2.2
       jsonpointer:
         specifier: ^5.0.1
         version: 5.0.1
@@ -3340,6 +3340,10 @@ packages:
     resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
+  js-yaml@5.2.2:
+    resolution: {integrity: sha512-dayzUzKkJ1MkuUtZglSebU43utNXH0OWQByK9rKOOuYIO8M5TV1y+n8ALMdG0rdzBnfNkOmZEqrURepb0ejqBw==}
+    hasBin: true
+
   jsesc@3.1.0:
     resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
     engines: {node: '>=6'}
@@ -9101,6 +9105,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@5.2.2:
+    dependencies:
+      argparse: 2.0.1
+
   jsesc@3.1.0: {}
 
   json-buffer@3.0.1: {}