diff --git a/package-lock.json b/package-lock.json
index 1dd564e76..75c0ba886 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10733,8 +10733,9 @@
             "license": "ISC"
         },
         "node_modules/yaml": {
-            "version": "2.4.1",
-            "license": "ISC",
+            "version": "2.4.3",
+            "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.4.3.tgz",
+            "integrity": "sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg==",
             "bin": {
                 "yaml": "bin.mjs"
             },
@@ -10848,7 +10849,7 @@
                 "unicode-properties": "^1.4.1",
                 "urijs": "^1.19.1",
                 "wordwrap": "^1.0.0",
-                "yaml": "^2.4.1"
+                "yaml": "^2.4.3"
             },
             "devDependencies": {
                 "@types/browser-or-node": "^1.3.2",
diff --git a/packages/quicktype-core/package.json b/packages/quicktype-core/package.json
index 580100e8d..e7d82b6dc 100644
--- a/packages/quicktype-core/package.json
+++ b/packages/quicktype-core/package.json
@@ -24,7 +24,7 @@
         "unicode-properties": "^1.4.1",
         "urijs": "^1.19.1",
         "wordwrap": "^1.0.0",
-        "yaml": "^2.4.1"
+        "yaml": "^2.4.3"
     },
     "devDependencies": {
         "@types/browser-or-node": "^1.3.2",