diff --git a/codeql/sarif_reporter/package-lock.json b/codeql/sarif_reporter/package-lock.json
index a2719dde0a7..8d72693d056 100644
--- a/codeql/sarif_reporter/package-lock.json
+++ b/codeql/sarif_reporter/package-lock.json
@@ -10,7 +10,7 @@
       "license": "MIT",
       "dependencies": {
         "cmd-ts": "^0.13.0",
-        "yaml": "^2.4.3"
+        "yaml": "^2.8.3"
       },
       "devDependencies": {
         "@types/node": "^20.12.7",
@@ -173,14 +173,17 @@
       "dev": true
     },
     "node_modules/yaml": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.4.3.tgz",
-      "integrity": "sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg==",
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg==",
       "bin": {
         "yaml": "bin.mjs"
       },
       "engines": {
-        "node": ">= 14"
+        "node": ">= 14.6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/eemeli"
       }
     }
   },
@@ -298,9 +301,9 @@
       "dev": true
     },
     "yaml": {
-      "version": "2.4.3",
-      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.4.3.tgz",
-      "integrity": "sha512-sntgmxj8o7DE7g/Qi60cqpLBA3HG3STcDA0kO+WfB05jEKhZMbY7umNm2rBpQvsmZ16/lPXCJGW2672dgOUkrg=="
+      "version": "2.8.3",
+      "resolved": "https://registry.npmjs.org/yaml/-/yaml-2.8.3.tgz",
+      "integrity": "sha512-AvbaCLOO2Otw/lW5bmh9d/WEdcDFdQp2Z2ZUH3pX9U2ihyUY0nvLv7J6TrWowklRGPYbB/IuIMfYgxaCPg5Bpg=="
     }
   }
 }
diff --git a/codeql/sarif_reporter/package.json b/codeql/sarif_reporter/package.json
index 6068660aecf..5efeb0967a6 100644
--- a/codeql/sarif_reporter/package.json
+++ b/codeql/sarif_reporter/package.json
@@ -17,6 +17,6 @@
   },
   "dependencies": {
     "cmd-ts": "^0.13.0",
-    "yaml": "^2.4.3"
+    "yaml": "^2.8.3"
   }
 }