diff --git a/.changeset/six-boats-exercise.md b/.changeset/six-boats-exercise.md
new file mode 100644
index 000000000..e6dc85b01
--- /dev/null
+++ b/.changeset/six-boats-exercise.md
@@ -0,0 +1,8 @@
+---
+"@asyncapi/multi-parser": major
+---
+
+
+Ensure jsonpath-plus version is ^10.0.7 due to a security fixed bug.
+The reason this is a major release is because we now require Node
+v18 or greater since this required jsonpath-plus version requires it.
diff --git a/packages/multi-parser/package.json b/packages/multi-parser/package.json
index 4755b5087..17772629d 100644
--- a/packages/multi-parser/package.json
+++ b/packages/multi-parser/package.json
@@ -64,5 +64,16 @@
     "ts-loader": "^9.3.1",
     "ts-node": "^10.9.1",
     "typescript": "^4.8.2"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "overrides": {
+    "parserapiv1": {
+      "jsonpath-plus": "^10.0.7"
+    },
+    "parserapiv2": {
+      "jsonpath-plus": "^10.0.7"
+    }
   }
 }