diff --git a/package-lock.json b/package-lock.json
index f4046a9e..ced8bb86 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -14215,9 +14215,9 @@
       "license": "MIT"
     },
     "node_modules/graphql": {
-      "version": "16.14.0",
-      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.14.0.tgz",
-      "integrity": "sha512-BBvQ/406p+4CZbTpCbVPSxfzrZrbnuWSP1ELYgyS6B+hNeKzgrdB4JczCa5VZUBQrDa9hUngm0KnexY6pJRN5Q==",
+      "version": "16.14.2",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.14.2.tgz",
+      "integrity": "sha512-Chq1s4CY7jmh8gO2qvLIJyfCDIN+EHLFW/9iShnp1z8FjBQMoodWP1kDC36VAMXXIvAjj4ARa7ntfAV2BrjsbA==",
       "license": "MIT",
       "engines": {
         "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
@@ -23817,7 +23817,7 @@
         "class-validator": "^0.15.0",
         "cookie-parser": "^1.4.7",
         "fast-xml-parser": "^5.8.0",
-        "graphql": "^16.14.0",
+        "graphql": "^16.14.2",
         "graphql-request": "^7.1.2",
         "helmet": "^8.2.0",
         "https-proxy-agent": "^7.0.6",
diff --git a/packages/backend/package.json b/packages/backend/package.json
index 53726b3f..005f9a95 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -49,7 +49,7 @@
     "class-validator": "^0.15.0",
     "cookie-parser": "^1.4.7",
     "fast-xml-parser": "^5.8.0",
-    "graphql": "^16.14.0",
+    "graphql": "^16.14.2",
     "graphql-request": "^7.1.2",
     "helmet": "^8.2.0",
     "https-proxy-agent": "^7.0.6",