diff --git a/package.json b/package.json
index 823e2181f..905cd15bd 100644
--- a/package.json
+++ b/package.json
@@ -25,7 +25,7 @@
     "applicationinsights": "3.15.0",
     "body-parser": "^2.0.0",
     "brace-expansion": "^5.0.5",
-    "config": "^4.0.0",
+    "config": "^5.0.0",
     "cookie": "^1.0.0",
     "cookie-parser": "~1.4.3",
     "cross-env": "^10.0.0",
diff --git a/yarn.lock b/yarn.lock
index 5c2c5d32a..23edab273 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2276,7 +2276,7 @@ __metadata:
     brace-expansion: "npm:^5.0.5"
     chai: "npm:^6.0.0"
     chai-http: "npm:^5.0.0"
-    config: "npm:^4.0.0"
+    config: "npm:^5.0.0"
     cookie: "npm:^1.0.0"
     cookie-parser: "npm:~1.4.3"
     cross-env: "npm:^10.0.0"
@@ -2490,12 +2490,12 @@ __metadata:
   languageName: node
   linkType: hard
 
-"config@npm:^4.0.0":
-  version: 4.4.2
-  resolution: "config@npm:4.4.2"
+"config@npm:^5.0.0":
+  version: 5.0.0
+  resolution: "config@npm:5.0.0"
   dependencies:
     json5: "npm:^2.2.3"
-  checksum: 10/57c321f94d8893f3748daefc62923b806d8d79f1da12f448f5ee190c25aa75aed5c6e31f206c3dd0ea7a8f2d11d6737d24f92019509a5d2f4773156ede16e7de
+  checksum: 10/317dc25a4ded70010cc5636fb92d35b845e94e49f54a52a4a5ecaa81f3b118b8e2bf5e56ce486ab9c8c5e5e8ef68668ca2a95ef8eb12ee382aadbe834f382c40
   languageName: node
   linkType: hard