diff --git a/mcp/package-lock.json b/mcp/package-lock.json
index 193fb392..5ed58402 100644
--- a/mcp/package-lock.json
+++ b/mcp/package-lock.json
@@ -12,7 +12,7 @@
         "@cloudflare/workers-types": "^5.20260911.1",
         "typescript": "^7.0.2",
         "wrangler": "^4.131.0",
-        "yaml": "^2.6.0"
+        "yaml": "^2.9.1"
       }
     },
     "node_modules/@cloudflare/kv-asset-handler": {
@@ -1950,9 +1950,9 @@
       }
     },
     "node_modules/yaml": {
-      "version": "2.9.0",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.0.tgz",
-      "integrity": "sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==",
+      "version": "2.9.1",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.9.1.tgz",
+      "integrity": "sha512-3NxN8+78OdzbT7C/WjGsyfPAtJaN3FNDsWxv7Y7mcDsT/oOmgW8BpyQQFFBnvZE3j9Y2Sdz1ULFLezL7Eb2yFw==",
       "dev": true,
       "license": "ISC",
       "bin": {
diff --git a/mcp/package.json b/mcp/package.json
index b9f4f6a9..434493b3 100644
--- a/mcp/package.json
+++ b/mcp/package.json
@@ -19,7 +19,7 @@
     "@cloudflare/workers-types": "^5.20260911.1",
     "typescript": "^7.0.2",
     "wrangler": "^4.131.0",
-    "yaml": "^2.6.0"
+    "yaml": "^2.9.1"
   },
   "overrides": {
     "sharp": "^0.35.4"