diff --git a/packages/brick-container/package.json b/packages/brick-container/package.json
index 9de1dd1a35..6d1bf91bd9 100644
--- a/packages/brick-container/package.json
+++ b/packages/brick-container/package.json
@@ -43,7 +43,7 @@
     "express": "^4.21.2",
     "glob": "^8.1.0",
     "http-proxy-middleware": "^3.0.3",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21",
     "meow": "^11.0.0",
     "mockdate": "^3.0.5",
diff --git a/packages/create-api-sdk/package.json b/packages/create-api-sdk/package.json
index 5427e80fcb..94334973a6 100644
--- a/packages/create-api-sdk/package.json
+++ b/packages/create-api-sdk/package.json
@@ -46,7 +46,7 @@
     "change-case": "^4.1.2",
     "fs-extra": "^10.1.0",
     "inquirer": "^8.2.6",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "klaw-sync": "^6.0.0",
     "meow": "^9.0.0",
     "prettier": "^3.6.2",
diff --git a/packages/doc-helpers/package.json b/packages/doc-helpers/package.json
index 2852e50875..88233aca99 100644
--- a/packages/doc-helpers/package.json
+++ b/packages/doc-helpers/package.json
@@ -29,7 +29,7 @@
   "dependencies": {
     "@next-core/brick-manifest": "^0.7.2",
     "fast-xml-parser": "^5.2.5",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "prettier": "^3.6.2"
   }
 }
diff --git a/packages/easyops-runtime/package.json b/packages/easyops-runtime/package.json
index 070a4ae20b..45c4dbfd13 100644
--- a/packages/easyops-runtime/package.json
+++ b/packages/easyops-runtime/package.json
@@ -52,7 +52,7 @@
     "@next-core/runtime": "^1.65.7",
     "@next-core/types": "^1.17.0",
     "@next-core/utils": "^1.8.4",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21"
   },
   "devDependencies": {
diff --git a/packages/pipes/package.json b/packages/pipes/package.json
index 9b32a50240..9ecd5e1433 100644
--- a/packages/pipes/package.json
+++ b/packages/pipes/package.json
@@ -40,7 +40,7 @@
   "sideEffects": false,
   "dependencies": {
     "@easyops-cn/brick-next-pipes": "^0.7.3",
-    "js-yaml": "^3.14.1",
+    "js-yaml": "^4.0.0",
     "lodash": "^4.17.21",
     "moment": "^2.30.1"
   },
diff --git a/packages/preview/package.json b/packages/preview/package.json
index 8b9e747824..167de7fb55 100644
--- a/packages/preview/package.json
+++ b/packages/preview/package.json
@@ -32,6 +32,6 @@
     "@next-core/theme": "^1.6.0",
     "@next-core/types": "^1.17.0",
     "html-webpack-plugin": "^5.6.3",
-    "js-yaml": "^3.14.1"
+    "js-yaml": "^4.0.0"
   }
 }
diff --git a/yarn.lock b/yarn.lock
index 9d11471fdc..373d5e5eee 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9023,14 +9023,14 @@ jju@~1.4.0:
   version "4.0.0"
   resolved "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
 
-js-yaml@4.1.0, js-yaml@^4.1.0:
+js-yaml@4.1.0:
   version "4.1.0"
   resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
   integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
   dependencies:
     argparse "^2.0.1"
 
-js-yaml@^3.10.0, js-yaml@^3.13.1, js-yaml@^3.14.1:
+js-yaml@^3.10.0, js-yaml@^3.13.1:
   version "3.14.1"
   resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz"
   integrity sha1-2ugS/bOCX6MGYJqHFzg8UMNqBTc=
@@ -9038,6 +9038,13 @@ js-yaml@^3.10.0, js-yaml@^3.13.1, js-yaml@^3.14.1:
     argparse "^1.0.7"
     esprima "^4.0.0"
 
+js-yaml@^4.0.0, js-yaml@^4.1.0:
+  version "4.1.1"
+  resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b"
+  integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==
+  dependencies:
+    argparse "^2.0.1"
+
 jsbn@~0.1.0:
   version "0.1.1"
   resolved "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"