diff --git a/packages/verdaccio/package.json b/packages/verdaccio/package.json
index 656439948..2f7f314c3 100644
--- a/packages/verdaccio/package.json
+++ b/packages/verdaccio/package.json
@@ -61,7 +61,7 @@
     "node-mocks-http": "1.14.1",
     "typedoc-plugin-markdown": "3.14.0",
     "typedoc-plugin-missing-exports": "1.0.0",
-    "yaml": "2.5.1"
+    "yaml": "2.6.1"
   },
   "keywords": [
     "private",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 2af37cdc4..029cbd999 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2163,8 +2163,8 @@ importers:
         specifier: 5.0.1
         version: 5.0.1(typescript@4.9.5)
       yaml:
-        specifier: 2.5.1
-        version: 2.5.1
+        specifier: 2.6.1
+        version: 2.6.1
 
   packages/web:
     dependencies:
@@ -34071,8 +34071,8 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  /yaml@2.5.1:
-    resolution: {integrity: sha512-bLQOjaX/ADgQ20isPJRvF0iRUHIxVhYvr53Of7wGcWlO2jvtUlH5m87DsmulFVxRpNLOnI4tB6p/oh8D7kpn9Q==}
+  /yaml@2.6.1:
+    resolution: {integrity: sha512-7r0XPzioN/Q9kXBro/XPnA6kznR73DHq+GXh5ON7ZozRO6aMjbmiBuKste2wslTFkC5d1dw0GooOCepZXJ2SAg==}
     engines: {node: '>= 14'}
     hasBin: true
     dev: true