diff --git a/package.json b/package.json
index 73d79771f..5ac4f26df 100644
--- a/package.json
+++ b/package.json
@@ -21,7 +21,7 @@
     "@rollup/plugin-typescript": "12.3.0",
     "eslint": "10.4.0",
     "eslint-config-prettier": "10.1.8",
-    "eslint-plugin-security": "4.0.1",
+    "eslint-plugin-security": "4.1.0",
     "prettier": "3.8.3",
     "rollup": "4.63.1",
     "tslib": "2.8.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c7eb10104..9ff6089e3 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -107,7 +107,6 @@ settings:
 
 overrides:
   serialize-javascript@<7.0.5: ^7.0.5
-  devalue@<5.9.1: ^5.9.1
   morgan@<1.12.0: ^1.12.0
 
 importers:
@@ -133,8 +132,8 @@ importers:
         specifier: 10.1.8
         version: 10.1.8(eslint@10.4.0(jiti@2.6.1)(supports-color@8.1.1))
       eslint-plugin-security:
-        specifier: 4.0.1
-        version: 4.0.1
+        specifier: 4.1.0
+        version: 4.1.0
       prettier:
         specifier: 3.8.3
         version: 3.8.3
@@ -2420,8 +2419,8 @@ packages:
   brace-expansion@2.1.7:
     resolution: {integrity: sha512-uZbew1NqdmPDTMJ8ah1y+b+9QEJrfkXFk3RcTQw3X0jW/xRUvFKsg1CfQdSYGdTbXZWExtU3J3ccxtnfw1Fi0g==}
 
-  brace-expansion@5.0.9:
-    resolution: {integrity: sha512-ScQ4IuvIEF1TMlP7Zt+vjJ//9zlPb2SDcxWxM3bk8s6t6GGdJ7KO1dCcTidOPJKePW30LE/2cT7wCyPho9/Wxg==}
+  brace-expansion@5.0.12:
+    resolution: {integrity: sha512-YovQ3rzhaLMIrDjNDMkNS01tea93qhEhG5xy8f6+R0l+dw3Ki+5sCoIoI942iuLZTHWogWktgwVDhU09iNEimQ==}
     engines: {node: 20 || >=22}
 
   braces@3.0.3:
@@ -2890,8 +2889,8 @@ packages:
     peerDependencies:
       eslint: '>=7.0.0'
 
-  eslint-plugin-security@4.0.1:
-    resolution: {integrity: sha512-/lZCkOxPOWaf1jXAqgICrS8St3BMBccIPvhOSUYuV6VCr1o5nFVG998FnTLt6w2Nxb8Uo0nM8fzmnhp+GY/aEg==}
+  eslint-plugin-security@4.1.0:
+    resolution: {integrity: sha512-cB4H72o/w8C0cm4uHJOnXMJz7MYTTuOwhn2X7PMuzZwfwqUoHK/ASHT6WKP+95lFk5Hkf3xfpiXB8a1+cef4rg==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
   eslint-scope@9.1.2:
@@ -6555,7 +6554,7 @@ snapshots:
     dependencies:
       balanced-match: 1.0.2
 
-  brace-expansion@5.0.9:
+  brace-expansion@5.0.12:
     dependencies:
       balanced-match: 4.0.4
 
@@ -7020,7 +7019,7 @@ snapshots:
     dependencies:
       eslint: 10.4.0(jiti@2.6.1)(supports-color@8.1.1)
 
-  eslint-plugin-security@4.0.1:
+  eslint-plugin-security@4.1.0:
     dependencies:
       safe-regex: 2.1.1
 
@@ -7848,7 +7847,7 @@ snapshots:
 
   minimatch@10.2.4:
     dependencies:
-      brace-expansion: 5.0.9
+      brace-expansion: 5.0.12
 
   minimatch@3.1.5:
     dependencies:
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 3106fb374..8fa2cdfdd 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -18,7 +18,6 @@ allowBuilds:
 overrides:
   # mocha (via @wdio/mocha-framework) pins a vulnerable range
   serialize-javascript@<7.0.5: ^7.0.5
-  devalue@<5.9.1: ^5.9.1
   morgan@<1.12.0: ^1.12.0
 
 auditConfig: