diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 5381cc79d6d..ee72169ce19 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -379,8 +379,8 @@ importers:
         specifier: ^1.1.8
         version: 1.1.8
       ejs:
-        specifier: ^7.0.1
-        version: 7.0.1
+        specifier: ^7.0.2
+        version: 7.0.2
       entities:
         specifier: ^8.1.0
         version: 8.1.0
@@ -3125,8 +3125,8 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  ejs@7.0.1:
-    resolution: {integrity: sha512-TrAb1fY4jNY6aQrNjMJsoWQxGUK47A38JxuUvnt75vDcAA9Ln7ur6FHo+irVa5Bwd3w9rdUT3xLSl5MRgHIugg==}
+  ejs@7.0.2:
+    resolution: {integrity: sha512-LcDSEP6Oclb9sTiSyG0MpG0RuKvLDRxCOOt+2sIk+kdk1rMkFU8SRnT0qaNt5zvU0LOV1YXXOvIoZL/sKwabvw==}
     engines: {node: '>=0.12.18'}
     hasBin: true
 
@@ -8317,7 +8317,7 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  ejs@7.0.1: {}
+  ejs@7.0.2: {}
 
   electron-to-chromium@1.5.387: {}
 
diff --git a/src/package.json b/src/package.json
index 67103e715b4..1fb9eb15aba 100644
--- a/src/package.json
+++ b/src/package.json
@@ -37,7 +37,7 @@
     "cross-env": "^10.1.0",
     "cross-spawn": "^7.0.6",
     "dirty-ts": "^1.1.8",
-    "ejs": "^7.0.1",
+    "ejs": "^7.0.2",
     "esbuild": "^0.28.2",
     "express": "^5.3.0",
     "express-rate-limit": "^8.7.1",