diff --git a/packages/verdaccio/package.json b/packages/verdaccio/package.json
index 9b206bb0f..7c5861f82 100644
--- a/packages/verdaccio/package.json
+++ b/packages/verdaccio/package.json
@@ -61,7 +61,7 @@
     "node-mocks-http": "1.14.1",
     "typedoc-plugin-markdown": "3.14.0",
     "typedoc-plugin-missing-exports": "1.0.0",
-    "yaml": "2.3.4"
+    "yaml": "2.4.3"
   },
   "keywords": [
     "private",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 690202cab..dbfa3736a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2094,8 +2094,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0(typedoc@0.23.25)
       yaml:
-        specifier: 2.3.4
-        version: 2.3.4
+        specifier: 2.4.3
+        version: 2.4.3
 
   packages/web:
     dependencies:
@@ -30317,9 +30317,10 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  /yaml@2.3.4:
-    resolution: {integrity: sha512-8aAvwVUSHpfEqTQ4w/KMlf3HcRdt50E5ODIQJBw1fQ5RL34xabzxtUlzTXVqc4rkZsPbvrXKWnABCD7kWSmocA==}
+  /yaml@2.4.3:
+    resolution: {integrity: sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg==}
     engines: {node: '>= 14'}
+    hasBin: true
     dev: true
 
   /yargs-parser@13.1.2: