diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3c3be2c8441..547045bde62 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -209,8 +209,8 @@ importers:
         specifier: ^1.1.8
         version: 1.1.8
       ejs:
-        specifier: ^5.0.2
-        version: 5.0.2
+        specifier: ^6.0.1
+        version: 6.0.1
       esbuild:
         specifier: ^0.28.0
         version: 0.28.0
@@ -2933,8 +2933,8 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  ejs@5.0.2:
-    resolution: {integrity: sha512-IpbUaI/CAW86l3f+T8zN0iggSc0LmMZLcIW5eRVStLVNCoTXkE0YlncbbH50fp8Cl6zHIky0sW2uUbhBqGw0Jw==}
+  ejs@6.0.1:
+    resolution: {integrity: sha512-UaaM14yby8U3k02ihS1Bmj5Kz2d7CCQM1scxpgs4Mhkq8F1wR2gl3+Ts4h5Ne4Mnt7M9m4Dw7jsuMr3+xO4vZA==}
     engines: {node: '>=0.12.18'}
     hasBin: true
 
@@ -8196,7 +8196,7 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  ejs@5.0.2: {}
+  ejs@6.0.1: {}
 
   electron-to-chromium@1.5.343: {}
 
diff --git a/src/package.json b/src/package.json
index e446fb3d965..f7d98ba2186 100644
--- a/src/package.json
+++ b/src/package.json
@@ -37,7 +37,7 @@
     "cross-env": "^10.1.0",
     "cross-spawn": "^7.0.6",
     "dirty-ts": "^1.1.8",
-    "ejs": "^5.0.2",
+    "ejs": "^6.0.1",
     "esbuild": "^0.28.0",
     "express": "^5.2.1",
     "express-rate-limit": "^8.5.1",