diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index a8d25a034ff..0df3ecde7cc 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -382,8 +382,8 @@ importers:
         specifier: ^7.0.2
         version: 7.0.2
       entities:
-        specifier: ^8.1.0
-        version: 8.1.0
+        specifier: ^9.0.0
+        version: 9.0.0
       esbuild:
         specifier: ^0.28.2
         version: 0.28.2
@@ -3197,6 +3197,10 @@ packages:
     resolution: {integrity: sha512-kxL7msIffSuh9aaFAMD7rxAIuTRMAHMeBtgHW2yUdWw732ZNh4MehkF2gdjvtdmikkaIP9bFDDJOPlsvm7avrA==}
     engines: {node: '>=20.19.0'}
 
+  entities@9.0.0:
+    resolution: {integrity: sha512-oJFNDJg3kTPwAD1cNn2+WmUq4wFoo09npc3Ydf1D7ED4smRiWrsKnaLxykrTWgyGEcusc87P5dxlAleol9kpkg==}
+    engines: {node: '>=20.19.0'}
+
   error@4.4.0:
     resolution: {integrity: sha512-SNDKualLUtT4StGFP7xNfuFybL2f6iJujFtrWuvJqGbVQGaN+adE23veqzPz1hjUjTunLi2EnJ+0SJxtbJreKw==}
 
@@ -8401,6 +8405,8 @@ snapshots:
 
   entities@8.1.0: {}
 
+  entities@9.0.0: {}
+
   error@4.4.0:
     dependencies:
       camelize: 1.0.1
diff --git a/src/package.json b/src/package.json
index 151d0b5d53a..2320fcdb29a 100644
--- a/src/package.json
+++ b/src/package.json
@@ -44,7 +44,7 @@
     "express-session": "^1.19.0",
     "formidable": "^3.5.4",
     "html-to-docx": "^1.8.0",
-    "entities": "^8.1.0",
+    "entities": "^9.0.0",
     "htmlparser2": "^12.0.0",
     "http-errors": "^2.0.1",
     "jose": "^6.2.15",