diff --git a/package-lock.json b/package-lock.json
index a88b5d30b87..323c84e390a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -22,7 +22,7 @@
         "iterare": "1.2.1",
         "load-esm": "1.0.3",
         "object-hash": "3.0.0",
-        "path-to-regexp": "8.3.0",
+        "path-to-regexp": "8.4.0",
         "reflect-metadata": "0.2.2",
         "rxjs": "7.8.2",
         "socket.io": "4.8.3",
@@ -3223,6 +3223,18 @@
         }
       }
     },
+    "node_modules/@nestjs/core/node_modules/path-to-regexp": {
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz",
+      "integrity": "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
     "node_modules/@nestjs/graphql": {
       "version": "13.2.4",
       "resolved": "https://registry.npmjs.org/@nestjs/graphql/-/graphql-13.2.4.tgz",
@@ -21121,9 +21133,9 @@
       }
     },
     "node_modules/path-to-regexp": {
-      "version": "8.3.0",
-      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.3.0.tgz",
-      "integrity": "sha512-7jdwVIRtsP8MYpdXSwOS0YdD0Du+qOoF/AEPIt88PcCFrZCzx41oxku1jD88hZBwbNUIEfpqvuhjFaMAqMTWnA==",
+      "version": "8.4.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-8.4.0.tgz",
+      "integrity": "sha512-PuseHIvAnz3bjrM2rGJtSgo1zjgxapTLZ7x2pjhzWwlp4SJQgK3f3iZIQwkpEnBaKz6seKBADpM4B4ySkuYypg==",
       "license": "MIT",
       "funding": {
         "type": "opencollective",
diff --git a/package.json b/package.json
index 0e9ab7168ec..3d6abd60ea2 100644
--- a/package.json
+++ b/package.json
@@ -71,7 +71,7 @@
     "iterare": "1.2.1",
     "load-esm": "1.0.3",
     "object-hash": "3.0.0",
-    "path-to-regexp": "8.3.0",
+    "path-to-regexp": "8.4.0",
     "reflect-metadata": "0.2.2",
     "rxjs": "7.8.2",
     "socket.io": "4.8.3",
diff --git a/packages/core/package.json b/packages/core/package.json
index 0953399fd3d..496f0d88270 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -34,7 +34,7 @@
     "@nuxt/opencollective": "0.4.1",
     "fast-safe-stringify": "2.1.1",
     "iterare": "1.2.1",
-    "path-to-regexp": "8.3.0",
+    "path-to-regexp": "8.4.0",
     "tslib": "2.8.1",
     "uid": "2.0.2"
   },
diff --git a/packages/platform-express/package.json b/packages/platform-express/package.json
index f9433a498dc..fee114788a8 100644
--- a/packages/platform-express/package.json
+++ b/packages/platform-express/package.json
@@ -21,7 +21,7 @@
     "cors": "2.8.6",
     "express": "5.2.1",
     "multer": "2.1.1",
-    "path-to-regexp": "8.3.0",
+    "path-to-regexp": "8.4.0",
     "tslib": "2.8.1"
   },
   "devDependencies": {
diff --git a/packages/platform-fastify/package.json b/packages/platform-fastify/package.json
index 02a61f4d868..a7fef6444d5 100644
--- a/packages/platform-fastify/package.json
+++ b/packages/platform-fastify/package.json
@@ -25,7 +25,7 @@
     "fastify-plugin": "5.1.0",
     "find-my-way": "9.5.0",
     "light-my-request": "6.6.0",
-    "path-to-regexp": "8.3.0",
+    "path-to-regexp": "8.4.0",
     "reusify": "1.1.0",
     "tslib": "2.8.1"
   },