diff --git a/packages/graphql/package.json b/packages/graphql/package.json
index 7dc1eb508..1f70335a3 100644
--- a/packages/graphql/package.json
+++ b/packages/graphql/package.json
@@ -30,7 +30,7 @@
     "normalize-path": "3.0.0",
     "subscriptions-transport-ws": "0.11.0",
     "tslib": "2.8.1",
-    "ws": "8.19.0"
+    "ws": "8.20.0"
   },
   "devDependencies": {
     "@apollo/subgraph": "2.2.3",
diff --git a/yarn.lock b/yarn.lock
index a0919f089..db0454bcc 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11836,10 +11836,10 @@ write-file-atomic@^6.0.0:
     imurmurhash "^0.1.4"
     signal-exit "^4.0.1"
 
-ws@8.19.0:
-  version "8.19.0"
-  resolved "https://registry.yarnpkg.com/ws/-/ws-8.19.0.tgz#ddc2bdfa5b9ad860204f5a72a4863a8895fd8c8b"
-  integrity sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==
+ws@8.20.0:
+  version "8.20.0"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-8.20.0.tgz#4cd9532358eba60bc863aad1623dfb045a4d4af8"
+  integrity sha512-sAt8BhgNbzCtgGbt2OxmpuryO63ZoDk/sqaB/znQm94T4fCEsy/yV+7CdC1kJhOU9lboAEU7R3kquuycDoibVA==
 
 "ws@^5.2.0 || ^6.0.0 || ^7.0.0":
   version "7.5.10"