diff --git a/packages/verdaccio/package.json b/packages/verdaccio/package.json
index 26e62f50a..63a6d2524 100644
--- a/packages/verdaccio/package.json
+++ b/packages/verdaccio/package.json
@@ -61,7 +61,7 @@
     "node-mocks-http": "1.14.1",
     "typedoc-plugin-markdown": "3.14.0",
     "typedoc-plugin-missing-exports": "1.0.0",
-    "yaml": "2.5.0"
+    "yaml": "2.5.1"
   },
   "keywords": [
     "private",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 1a45ca146..1aa688f08 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2131,8 +2131,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0(typedoc@0.23.25)
       yaml:
-        specifier: 2.5.0
-        version: 2.5.0
+        specifier: 2.5.1
+        version: 2.5.1
 
   packages/web:
     dependencies:
@@ -31692,8 +31692,8 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  /yaml@2.5.0:
-    resolution: {integrity: sha512-2wWLbGbYDiSqqIKoPjar3MPgB94ErzCtrNE1FdqGuaO0pi2JGjmE8aW8TDZwzU7vuxcGRdL/4gPQwQ7hD5AMSw==}
+  /yaml@2.5.1:
+    resolution: {integrity: sha512-bLQOjaX/ADgQ20isPJRvF0iRUHIxVhYvr53Of7wGcWlO2jvtUlH5m87DsmulFVxRpNLOnI4tB6p/oh8D7kpn9Q==}
     engines: {node: '>= 14'}
     hasBin: true
     dev: true