diff --git a/packages/verdaccio/package.json b/packages/verdaccio/package.json
index f9d792be4..daee9f716 100644
--- a/packages/verdaccio/package.json
+++ b/packages/verdaccio/package.json
@@ -61,7 +61,7 @@
     "node-mocks-http": "1.14.1",
     "typedoc-plugin-markdown": "3.14.0",
     "typedoc-plugin-missing-exports": "1.0.0",
-    "yaml": "2.6.1"
+    "yaml": "2.7.0"
   },
   "keywords": [
     "private",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index bdb495dc2..58f0d2e65 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2184,8 +2184,8 @@ importers:
         specifier: 5.0.1
         version: 5.0.1(typescript@4.9.5)
       yaml:
-        specifier: 2.6.1
-        version: 2.6.1
+        specifier: 2.7.0
+        version: 2.7.0
 
   packages/web:
     dependencies:
@@ -31948,8 +31948,8 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  /yaml@2.6.1:
-    resolution: {integrity: sha512-7r0XPzioN/Q9kXBro/XPnA6kznR73DHq+GXh5ON7ZozRO6aMjbmiBuKste2wslTFkC5d1dw0GooOCepZXJ2SAg==}
+  /yaml@2.7.0:
+    resolution: {integrity: sha512-+hSoy/QHluxmC9kCIJyL/uyFmLmc+e5CFR5Wa+bpIhIj85LVb9ZH2nVnqrHoSvKogwODv0ClqZkmiSSaIH5LTA==}
     engines: {node: '>= 14'}
     hasBin: true
     dev: true