diff --git a/tests/e2e/mcp/vulnerable-server/package-lock.json b/tests/e2e/mcp/vulnerable-server/package-lock.json
index 2d47d591..154b1c4e 100644
--- a/tests/e2e/mcp/vulnerable-server/package-lock.json
+++ b/tests/e2e/mcp/vulnerable-server/package-lock.json
@@ -1110,9 +1110,9 @@
       }
     },
     "node_modules/hono": {
-      "version": "4.13.1",
-      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.1.tgz",
-      "integrity": "sha512-kdJoFVv2xmayw6cY09H7AbMJMt8Jn5jdlEdXsP7AGBdF2DIptVlKlOLKXP41yPip4/a3yQPv9gVcJYI8YY04dw==",
+      "version": "4.13.7",
+      "resolved": "https://registry.npmjs.org/hono/-/hono-4.13.7.tgz",
+      "integrity": "sha512-c8/gF9ac8Y78/agExVocyLevgR+JlpNB444Py0FSX8pJoPdYUfUzRcXtYEYGwt6l19qIlVZPN5Mfsw9jFShmQQ==",
       "dev": true,
       "license": "MIT",
       "engines": {