diff --git a/cluster/pulumi/common/package.json b/cluster/pulumi/common/package.json
index e86c2325d8..1c5187c79f 100644
--- a/cluster/pulumi/common/package.json
+++ b/cluster/pulumi/common/package.json
@@ -15,7 +15,7 @@
     "@pulumi/github": "6.13.1",
     "@types/auth0": "^3.3.11",
     "auth0": "^5.6.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.0",
     "lodash": "^4.18.1",
     "node-fetch": "^2.7.0",
     "ts-node": "^10.9.2",
diff --git a/cluster/pulumi/gha/package.json b/cluster/pulumi/gha/package.json
index 19a66ba5d1..82fcf8f418 100644
--- a/cluster/pulumi/gha/package.json
+++ b/cluster/pulumi/gha/package.json
@@ -4,7 +4,7 @@
   "main": "src/index.ts",
   "dependencies": {
     "@canton-network/splice-pulumi-common": "1.0.0",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^4.3.0"
   },
   "scripts": {
     "fix": "npm run format:fix && npm run lint:fix",
diff --git a/cluster/pulumi/package-lock.json b/cluster/pulumi/package-lock.json
index a79a914f8a..718144b0b4 100644
--- a/cluster/pulumi/package-lock.json
+++ b/cluster/pulumi/package-lock.json
@@ -98,7 +98,7 @@
                 "@pulumi/std": "2.3.2",
                 "@types/auth0": "^3.3.11",
                 "auth0": "^5.6.0",
-                "js-yaml": "^4.1.0",
+                "js-yaml": "^4.3.0",
                 "lodash": "^4.18.1",
                 "node-fetch": "^2.7.0",
                 "ts-node": "^10.9.2",
@@ -151,7 +151,7 @@
             "version": "1.0.0",
             "dependencies": {
                 "@canton-network/splice-pulumi-common": "1.0.0",
-                "js-yaml": "^4.1.0"
+                "js-yaml": "^4.3.0"
             },
             "devDependencies": {
                 "@types/js-yaml": "^4.0.5"
@@ -8803,9 +8803,19 @@
             "license": "MIT"
         },
         "node_modules/js-yaml": {
-            "version": "4.1.1",
-            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.1.tgz",
-            "integrity": "sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==",
+            "version": "4.3.0",
+            "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
+            "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+            "funding": [
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/puzrin"
+                },
+                {
+                    "type": "github",
+                    "url": "https://github.com/sponsors/nodeca"
+                }
+            ],
             "license": "MIT",
             "dependencies": {
                 "argparse": "^2.0.1"