diff --git a/packages/graphql/package.json b/packages/graphql/package.json
index e06d47bbe..e6bd0d912 100644
--- a/packages/graphql/package.json
+++ b/packages/graphql/package.json
@@ -30,7 +30,7 @@
     "normalize-path": "3.0.0",
     "subscriptions-transport-ws": "0.11.0",
     "tslib": "2.8.1",
-    "ws": "8.18.1"
+    "ws": "8.18.3"
   },
   "devDependencies": {
     "@apollo/subgraph": "2.2.3",
diff --git a/yarn.lock b/yarn.lock
index c480567af..ade8539b3 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11714,10 +11714,10 @@ write-pkg@4.0.0:
     type-fest "^0.4.1"
     write-json-file "^3.2.0"
 
-ws@8.18.1:
-  version "8.18.1"
-  resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.1.tgz#ea131d3784e1dfdff91adb0a4a116b127515e3cb"
-  integrity sha512-RKW2aJZMXeMxVpnZ6bck+RswznaxmzdULiBr6KY7XkTnW8uvt0iT9H5DkHUChXrc+uurzwa0rVI16n/Xzjdz1w==
+ws@8.18.3:
+  version "8.18.3"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-8.18.3.tgz#b56b88abffde62791c639170400c93dcb0c95472"
+  integrity sha512-PEIGCY5tSlUt50cqyMXfCzX+oOPqN0vuGqWzbcJ2xvnkzkq46oOpz7dQaTDBdfICb4N14+GARUDw2XV2N4tvzg==
 
 "ws@^5.2.0 || ^6.0.0 || ^7.0.0":
   version "7.5.10"