diff --git a/package-lock.json b/package-lock.json
index 93e9792fc..350d49813 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -38,27 +38,27 @@
         "cors": "^2.8.5",
         "create-react-class": "^15.7.0",
         "dedent": "^1.7.2",
-        "express": "^5.1.0",
+        "express": "^5.3.0",
         "express-async-handler": "^1.2.0",
         "express-static-gzip": "3.0.2",
         "fflate": "^0.8.3",
         "fs-extra": "^11.4.1",
         "hash-wasm": "^4.12.0",
         "idb-keyval": "^6.2.5",
-        "js-yaml": "^5.4.3",
+        "js-yaml": "^5.5.0",
         "jwt-simple": "^0.5.6",
         "less": "^4.9.1",
         "lodash": "^4.18.1",
         "marked-hbfm": "^1.0.1",
         "markedLegacy": "npm:marked@^0.3.19",
         "moment": "^2.31.0",
-        "mongoose": "^9.11.1",
+        "mongoose": "^9.11.2",
         "nanoid": "6.0.2",
         "nconf": "^0.13.0",
-        "node": "^26.11.1",
-        "prettier": "^3.9.9",
-        "react": "^19.3.0",
-        "react-dom": "^19.3.0",
+        "node": "^26.12.0",
+        "prettier": "^3.9.10",
+        "react": "^19.3.1",
+        "react-dom": "^19.3.1",
         "react-frame-component": "^5.3.2",
         "react-router": "^8.4.0",
         "sanitize-filename": "1.6.4",
@@ -10866,6 +10866,22 @@
         "js-yaml": "bin/js-yaml.mjs"
       }
     },
+    "node_modules/js-yaml/node_modules/argparse": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-3.0.3.tgz",
+      "integrity": "sha512-Sn98ftV3KfsO8xfLPHG6oT8y+b0yvbrLgZjgPDXsharNY15tTAjqIsIju4S32nl6/iEUNNE4v+yL2Zhm8ooP3w==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "PSF-2.0"
+    },
     "node_modules/jsdom": {
       "version": "30.1.3",
       "resolved": "https://registry.npmjs.org/jsdom/-/jsdom-30.1.3.tgz",
diff --git a/package.json b/package.json
index 6f1269f97..facfe3b3d 100644
--- a/package.json
+++ b/package.json
@@ -115,27 +115,27 @@
     "cors": "^2.8.5",
     "create-react-class": "^15.7.0",
     "dedent": "^1.7.2",
-    "express": "^5.1.0",
+    "express": "^5.3.0",
     "express-async-handler": "^1.2.0",
     "express-static-gzip": "3.0.2",
     "fflate": "^0.8.3",
     "fs-extra": "^11.4.1",
     "hash-wasm": "^4.12.0",
     "idb-keyval": "^6.2.5",
-    "js-yaml": "^5.4.3",
+    "js-yaml": "^5.5.0",
     "jwt-simple": "^0.5.6",
     "less": "^4.9.1",
     "lodash": "^4.18.1",
     "marked-hbfm": "^1.0.1",
     "markedLegacy": "npm:marked@^0.3.19",
     "moment": "^2.31.0",
-    "mongoose": "^9.11.1",
+    "mongoose": "^9.11.2",
     "nanoid": "6.0.2",
     "nconf": "^0.13.0",
-    "node": "^26.11.1",
-    "prettier": "^3.9.9",
-    "react": "^19.3.0",
-    "react-dom": "^19.3.0",
+    "node": "^26.12.0",
+    "prettier": "^3.9.10",
+    "react": "^19.3.1",
+    "react-dom": "^19.3.1",
     "react-frame-component": "^5.3.2",
     "react-router": "^8.4.0",
     "sanitize-filename": "1.6.4",