diff --git a/apps/token-server/package-lock.json b/apps/token-server/package-lock.json
index 886a9e6fe9..3ab2b685f3 100644
--- a/apps/token-server/package-lock.json
+++ b/apps/token-server/package-lock.json
@@ -9,7 +9,7 @@
             "version": "0.0.0",
             "license": "MIT",
             "dependencies": {
-                "axios": "^1.7.7",
+                "axios": "^1.12.2",
                 "bip32": "^4.0.0",
                 "bip39": "^3.1.0",
                 "cors": "^2.8.5",
@@ -1750,13 +1750,13 @@
             "license": "MIT"
         },
         "node_modules/axios": {
-            "version": "1.8.1",
-            "resolved": "https://registry.npmjs.org/axios/-/axios-1.8.1.tgz",
-            "integrity": "sha512-NN+fvwH/kV01dYUQ3PTOZns4LWtWhOFCAhQ/pHb88WQ1hNe5V/dvFwc4VJcDL11LT9xSX0QtsR8sWUuyOuOq7g==",
+            "version": "1.12.2",
+            "resolved": "https://registry.npmjs.org/axios/-/axios-1.12.2.tgz",
+            "integrity": "sha512-vMJzPewAlRyOgxV2dU0Cuz2O8zzzx9VYtbJOaBgXFeLc4IV/Eg50n4LowmehOOR61S8ZMpc2K5Sa7g6A4jfkUw==",
             "license": "MIT",
             "dependencies": {
                 "follow-redirects": "^1.15.6",
-                "form-data": "^4.0.0",
+                "form-data": "^4.0.4",
                 "proxy-from-env": "^1.1.0"
             }
         },
@@ -1775,14 +1775,15 @@
             }
         },
         "node_modules/axios/node_modules/form-data": {
-            "version": "4.0.2",
-            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz",
-            "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==",
+            "version": "4.0.4",
+            "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
+            "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
             "license": "MIT",
             "dependencies": {
                 "asynckit": "^0.4.0",
                 "combined-stream": "^1.0.8",
                 "es-set-tostringtag": "^2.1.0",
+                "hasown": "^2.0.2",
                 "mime-types": "^2.1.12"
             },
             "engines": {
diff --git a/apps/token-server/package.json b/apps/token-server/package.json
index 15be431fa7..e8ccf5f37c 100644
--- a/apps/token-server/package.json
+++ b/apps/token-server/package.json
@@ -49,7 +49,7 @@
         "typescript": "^5.3.3"
     },
     "dependencies": {
-        "axios": "^1.7.7",
+        "axios": "^1.12.2",
         "bip32": "^4.0.0",
         "bip39": "^3.1.0",
         "cors": "^2.8.5",