diff --git a/workspaces/orchestrator/plugins/orchestrator-common/package.json b/workspaces/orchestrator/plugins/orchestrator-common/package.json
index 3def8b1321..7c3a0d9a50 100644
--- a/workspaces/orchestrator/plugins/orchestrator-common/package.json
+++ b/workspaces/orchestrator/plugins/orchestrator-common/package.json
@@ -59,7 +59,7 @@
     "@backstage/types": "^1.2.2",
     "@serverlessworkflow/sdk-typescript": "^0.8.4",
     "axios": "^1.11.0",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^4.1.1"
   },
   "devDependencies": {
     "@backstage/cli": "^0.34.5",
diff --git a/workspaces/orchestrator/plugins/scaffolder-backend-module-orchestrator/package.json b/workspaces/orchestrator/plugins/scaffolder-backend-module-orchestrator/package.json
index 4a9b7d9068..d631f98e69 100644
--- a/workspaces/orchestrator/plugins/scaffolder-backend-module-orchestrator/package.json
+++ b/workspaces/orchestrator/plugins/scaffolder-backend-module-orchestrator/package.json
@@ -62,7 +62,7 @@
     "@backstage/types": "^1.2.2",
     "@red-hat-developer-hub/backstage-plugin-orchestrator-common": "workspace:^",
     "axios": "^1.11.0",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^4.1.1"
   },
   "devDependencies": {
     "@backstage/cli": "^0.34.5",
diff --git a/workspaces/orchestrator/yarn.lock b/workspaces/orchestrator/yarn.lock
index 53c7041567..6ff1a29144 100644
--- a/workspaces/orchestrator/yarn.lock
+++ b/workspaces/orchestrator/yarn.lock
@@ -12728,7 +12728,7 @@ __metadata:
     "@serverlessworkflow/sdk-typescript": ^0.8.4
     "@types/json-schema": 7.0.15
     axios: ^1.11.0
-    js-yaml: ^4.1.0
+    js-yaml: ^4.1.1
     js-yaml-cli: ^0.6.0
   languageName: unknown
   linkType: soft
@@ -12888,7 +12888,7 @@ __metadata:
     "@red-hat-developer-hub/backstage-plugin-orchestrator-common": "workspace:^"
     "@spotify/prettier-config": ^15.0.0
     axios: ^1.11.0
-    js-yaml: ^4.1.0
+    js-yaml: ^4.1.1
   languageName: unknown
   linkType: soft
 
@@ -26911,6 +26911,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"js-yaml@npm:^4.1.1":
+  version: 4.1.1
+  resolution: "js-yaml@npm:4.1.1"
+  dependencies:
+    argparse: ^2.0.1
+  bin:
+    js-yaml: bin/js-yaml.js
+  checksum: ea2339c6930fe048ec31b007b3c90be2714ab3e7defcc2c27ebf30c74fd940358f29070b4345af0019ef151875bf3bc3f8644bea1bab0372652b5044813ac02d
+  languageName: node
+  linkType: hard
+
 "js-yaml@npm:~ 3.0.1":
   version: 3.0.2
   resolution: "js-yaml@npm:3.0.2"