diff --git a/package-lock.json b/package-lock.json
index b213a7b41..5b36ac6c7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
         "xxhashjs": "^0.2.2"
       },
       "devDependencies": {
-        "@babel/cli": "^7.28.0",
+        "@babel/cli": "^7.28.3",
         "@babel/core": "^7.28.0",
         "@babel/plugin-proposal-class-properties": "^7.17.12",
         "@babel/plugin-proposal-object-rest-spread": "^7.20.7",
@@ -102,10 +102,11 @@
       "license": "ISC"
     },
     "node_modules/@babel/cli": {
-      "version": "7.28.0",
-      "resolved": "https://registry.npmjs.org/@babel/cli/-/cli-7.28.0.tgz",
-      "integrity": "sha512-CYrZG7FagtE8ReKDBfItxnrEBf2khq2eTMnPuqO8UVN0wzhp1eMX1wfda8b1a32l2aqYLwRRIOGNovm8FVzmMw==",
+      "version": "7.28.3",
+      "resolved": "https://registry.npmjs.org/@babel/cli/-/cli-7.28.3.tgz",
+      "integrity": "sha512-n1RU5vuCX0CsaqaXm9I0KUCNKNQMy5epmzl/xdSSm70bSqhg9GWhgeosypyQLc0bK24+Xpk1WGzZlI9pJtkZdg==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@jridgewell/trace-mapping": "^0.3.28",
         "commander": "^6.2.0",
diff --git a/package.json b/package.json
index 780e255c9..e82634d3c 100644
--- a/package.json
+++ b/package.json
@@ -20,7 +20,7 @@
   },
   "description": "XP serverside runtime, handles the bulk of the React4xp work: server-side rendering, and handling and serving of client-side components and dependency chunks to the client, including the React4xp front-end rendering wrapper itself.\"",
   "devDependencies": {
-    "@babel/cli": "^7.28.0",
+    "@babel/cli": "^7.28.3",
     "@babel/core": "^7.28.0",
     "@babel/plugin-proposal-class-properties": "^7.17.12",
     "@babel/plugin-proposal-object-rest-spread": "^7.20.7",