diff --git a/packages/graphql/package.json b/packages/graphql/package.json
index fc88b5bbf..310f2cf0e 100644
--- a/packages/graphql/package.json
+++ b/packages/graphql/package.json
@@ -30,7 +30,7 @@
     "normalize-path": "3.0.0",
     "subscriptions-transport-ws": "0.11.0",
     "tslib": "2.8.1",
-    "ws": "8.18.1"
+    "ws": "8.18.2"
   },
   "devDependencies": {
     "@apollo/subgraph": "2.2.3",
diff --git a/yarn.lock b/yarn.lock
index 99775ad80..5ccc5a408 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11039,10 +11039,10 @@ write-pkg@4.0.0:
     type-fest "^0.4.1"
     write-json-file "^3.2.0"
 
-ws@8.18.1:
-  version "8.18.1"
-  resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.1.tgz#ea131d3784e1dfdff91adb0a4a116b127515e3cb"
-  integrity sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w==
+ws@8.18.2:
+  version "8.18.2"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.2.tgz#42738b2be57ced85f46154320aabb51ab003705a"
+  integrity sha512-DMricUmwGZUVr++AEAe2uiVM7UoO9MAVZMDu05UQOaUII0lp+zOzLLU4Xqh/JvTqklB1T4uELaaPBKyjE1r4fQ==
 
 "ws@^5.2.0 || ^6.0.0 || ^7.0.0":
   version "7.5.10"