diff --git a/packages/core/core/package.json b/packages/core/core/package.json
index eb939a5bb..bf83607ac 100644
--- a/packages/core/core/package.json
+++ b/packages/core/core/package.json
@@ -34,7 +34,7 @@
   },
   "dependencies": {
     "ajv": "8.17.1",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "http-errors": "2.0.0",
     "http-status-codes": "2.3.0",
     "process-warning": "1.0.0",
diff --git a/packages/hooks/package.json b/packages/hooks/package.json
index 599dc1e7c..5985bf420 100644
--- a/packages/hooks/package.json
+++ b/packages/hooks/package.json
@@ -31,7 +31,7 @@
   "dependencies": {
     "@verdaccio/core": "workspace:8.0.0-next-8.8",
     "@verdaccio/logger": "workspace:8.0.0-next-8.8",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "debug": "4.4.0",
     "got-cjs": "12.5.4",
     "handlebars": "4.7.8"
diff --git a/packages/node-api/package.json b/packages/node-api/package.json
index ab2247b66..9c19effde 100644
--- a/packages/node-api/package.json
+++ b/packages/node-api/package.json
@@ -43,7 +43,7 @@
     "@verdaccio/logger": "workspace:8.0.0-next-8.8",
     "@verdaccio/server": "workspace:8.0.0-next-8.8",
     "@verdaccio/server-fastify": "workspace:8.0.0-next-8.8",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "debug": "4.4.0",
     "lodash": "4.17.21"
   },
diff --git a/packages/plugins/htpasswd/package.json b/packages/plugins/htpasswd/package.json
index de488d57c..03ebf82bc 100644
--- a/packages/plugins/htpasswd/package.json
+++ b/packages/plugins/htpasswd/package.json
@@ -37,7 +37,7 @@
     "@verdaccio/file-locking": "workspace:13.0.0-next-8.2",
     "apache-md5": "1.1.8",
     "bcryptjs": "2.4.3",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "http-errors": "2.0.0",
     "debug": "4.4.0",
     "unix-crypt-td-js": "1.1.4"
diff --git a/packages/plugins/local-storage/package.json b/packages/plugins/local-storage/package.json
index fe78db034..553c6b441 100644
--- a/packages/plugins/local-storage/package.json
+++ b/packages/plugins/local-storage/package.json
@@ -39,7 +39,7 @@
     "@verdaccio/core": "workspace:8.0.0-next-8.8",
     "@verdaccio/file-locking": "workspace:13.0.0-next-8.2",
     "@verdaccio/utils": "workspace:8.1.0-next-8.8",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "debug": "4.4.0",
     "globby": "11.1.0",
     "lockfile": "1.0.4",
diff --git a/packages/server/fastify/package.json b/packages/server/fastify/package.json
index 7f73d1e48..babb878bb 100644
--- a/packages/server/fastify/package.json
+++ b/packages/server/fastify/package.json
@@ -40,7 +40,7 @@
     "@verdaccio/store": "workspace:8.0.0-next-8.8",
     "@verdaccio/tarball": "workspace:13.0.0-next-8.8",
     "@verdaccio/utils": "workspace:8.1.0-next-8.8",
-    "core-js": "3.37.1",
+    "core-js": "3.40.0",
     "debug": "4.4.0",
     "fastify": "4.25.2",
     "fastify-plugin": "4.5.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 89a07c858..6c479a403 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -703,8 +703,8 @@ importers:
         specifier: 8.17.1
         version: 8.17.1
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       http-errors:
         specifier: 2.0.0
         version: 2.0.0
@@ -809,8 +809,8 @@ importers:
         specifier: workspace:8.0.0-next-8.8
         version: link:../logger/logger
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       debug:
         specifier: 4.4.0
         version: 4.4.0(supports-color@5.5.0)
@@ -983,8 +983,8 @@ importers:
         specifier: workspace:8.0.0-next-8.8
         version: link:../server/fastify
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       debug:
         specifier: 4.4.0
         version: 4.4.0(supports-color@5.5.0)
@@ -1067,8 +1067,8 @@ importers:
         specifier: 2.4.3
         version: 2.4.3
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       debug:
         specifier: 4.4.0
         version: 4.4.0(supports-color@5.5.0)
@@ -1107,8 +1107,8 @@ importers:
         specifier: workspace:8.1.0-next-8.8
         version: link:../../utils
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       debug:
         specifier: 4.4.0
         version: 4.4.0(supports-color@5.5.0)
@@ -1586,8 +1586,8 @@ importers:
         specifier: workspace:8.1.0-next-8.8
         version: link:../../utils
       core-js:
-        specifier: 3.37.1
-        version: 3.37.1
+        specifier: 3.40.0
+        version: 3.40.0
       debug:
         specifier: 4.4.0
         version: 4.4.0(supports-color@5.5.0)
@@ -3079,7 +3079,7 @@ packages:
       '@babel/core': 7.26.7
       '@babel/register': 7.25.9(@babel/core@7.26.7)
       commander: 6.2.1
-      core-js: 3.37.1
+      core-js: 3.40.0
       node-environment-flags: 1.0.6
       regenerator-runtime: 0.14.1
       v8flags: 3.2.0
@@ -5304,7 +5304,7 @@ packages:
       cli-table3: 0.6.3
       combine-promises: 1.1.0
       commander: 5.1.0
-      core-js: 3.37.1
+      core-js: 3.40.0
       del: 6.1.1
       detect-port: 1.5.1
       escape-html: 1.0.3
@@ -13040,8 +13040,8 @@ packages:
     resolution: {integrity: sha512-7fEcWwKI4rJinnK+wLTezeg2smbFFdSBP6E2kQZNbnzM2s1rpKQ6aaRteZSSg7FLU3P0HGGVo/gbpfanU36urg==}
     requiresBuild: true
 
-  /core-js@3.37.1:
-    resolution: {integrity: sha512-Xn6qmxrQZyB0FFY8E3bgRXei3lWDJHhvI+u0q9TKIYM49G8pAr0FgnnrFRAmsbptZL1yxRADVXn+x5AGsbBfyw==}
+  /core-js@3.40.0:
+    resolution: {integrity: sha512-7vsMc/Lty6AGnn7uFpYT56QesI5D2Y/UkgKounk87OP9Z2H9Z8kj6jzcSGAxFmUtDOS0ntK6lbQz+Nsa0Jj6mQ==}
     requiresBuild: true
 
   /core-util-is@1.0.2: