diff --git a/.changeset/pr-255.md b/.changeset/pr-255.md
new file mode 100644
index 00000000..99fbf742
--- /dev/null
+++ b/.changeset/pr-255.md
@@ -0,0 +1,5 @@
+---
+"@wdio/browserstack-service": patch
+---
+
+- Raised the minimum `chalk` version to 5.6.2 so installs can never resolve the compromised `chalk@5.6.1` (GHSA-2v46-p5h4-248w).
diff --git a/package-lock.json b/package-lock.json
index 6c7bc729..f9f67c78 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12919,7 +12919,7 @@
         "@wdio/reporter": "^9.0.0",
         "@wdio/types": "^9.0.0",
         "browserstack-local": "^1.5.1",
-        "chalk": "^5.3.0",
+        "chalk": "^5.6.2",
         "csv-writer": "^1.6.0",
         "git-repo-info": "^2.1.1",
         "gitconfiglocal": "^2.1.0",
diff --git a/packages/browserstack-service/package.json b/packages/browserstack-service/package.json
index 2ea9eaed..45455b1c 100644
--- a/packages/browserstack-service/package.json
+++ b/packages/browserstack-service/package.json
@@ -64,7 +64,7 @@
     "@wdio/reporter": "^9.0.0",
     "@wdio/types": "^9.0.0",
     "browserstack-local": "^1.5.1",
-    "chalk": "^5.3.0",
+    "chalk": "^5.6.2",
     "csv-writer": "^1.6.0",
     "git-repo-info": "^2.1.1",
     "gitconfiglocal": "^2.1.0",