diff --git a/packages/verdaccio/package.json b/packages/verdaccio/package.json
index d9bac34a5..71e1171c3 100644
--- a/packages/verdaccio/package.json
+++ b/packages/verdaccio/package.json
@@ -61,7 +61,7 @@
     "node-mocks-http": "1.13.0",
     "typedoc-plugin-markdown": "3.14.0",
     "typedoc-plugin-missing-exports": "1.0.0",
-    "yaml": "2.2.0"
+    "yaml": "2.3.4"
   },
   "keywords": [
     "private",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 21f754a48..4eb322c22 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -2064,8 +2064,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0(typedoc@0.23.25)
       yaml:
-        specifier: 2.2.0
-        version: 2.2.0
+        specifier: 2.3.4
+        version: 2.3.4
 
   packages/web:
     dependencies:
@@ -29670,8 +29670,8 @@ packages:
     resolution: {integrity: sha512-r3vXyErRCYJ7wg28yvBY5VSoAF8ZvlcW9/BwUzEtUsjvX/DKs24dIkuwjtuprwJJHsbyUbLApepYTR1BN4uHrg==}
     engines: {node: '>= 6'}
 
-  /yaml@2.2.0:
-    resolution: {integrity: sha512-auf7Gi6QwO7HW//GA9seGvTXVGWl1CM/ADWh1+RxtXr6XOxnT65ovDl9fTi4e0monEyJxCHqDpF6QnFDXmJE4g==}
+  /yaml@2.3.4:
+    resolution: {integrity: sha512-8aAvwVUSHpfEqTQ4w/KMlf3HcRdt50E5ODIQJBw1fQ5RL34xabzxtUlzTXVqc4rkZsPbvrXKWnABCD7kWSmocA==}
     engines: {node: '>= 14'}
     dev: true