diff --git a/apps/cli/package.json b/apps/cli/package.json
index 54855d72104..0d3c151f012 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -70,7 +70,7 @@
     "chalk": "4.1.2",
     "commander": "11.1.0",
     "core-js": "3.44.0",
-    "form-data": "4.0.2",
+    "form-data": "4.0.4",
     "https-proxy-agent": "7.0.6",
     "inquirer": "8.2.6",
     "jsdom": "26.1.0",
diff --git a/package-lock.json b/package-lock.json
index fbbc4c25b44..85bd2a0efb0 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -43,7 +43,7 @@
         "chalk": "4.1.2",
         "commander": "11.1.0",
         "core-js": "3.44.0",
-        "form-data": "4.0.2",
+        "form-data": "4.0.4",
         "https-proxy-agent": "7.0.6",
         "inquirer": "8.2.6",
         "jsdom": "26.1.0",
@@ -206,7 +206,7 @@
         "chalk": "4.1.2",
         "commander": "11.1.0",
         "core-js": "3.44.0",
-        "form-data": "4.0.2",
+        "form-data": "4.0.4",
         "https-proxy-agent": "7.0.6",
         "inquirer": "8.2.6",
         "jsdom": "26.1.0",
@@ -358,6 +358,7 @@
       "license": "GPL-3.0"
     },
     "libs/messaging-internal": {
+      "name": "@bitwarden/messaging-internal",
       "version": "0.0.1",
       "license": "GPL-3.0"
     },
@@ -21194,14 +21195,15 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz",
-      "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
+      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
         "mime-types": "^2.1.12"
       },
       "engines": {
diff --git a/package.json b/package.json
index 2cb60a6afd1..bcf4f326531 100644
--- a/package.json
+++ b/package.json
@@ -178,7 +178,7 @@
     "chalk": "4.1.2",
     "commander": "11.1.0",
     "core-js": "3.44.0",
-    "form-data": "4.0.2",
+    "form-data": "4.0.4",
     "https-proxy-agent": "7.0.6",
     "inquirer": "8.2.6",
     "jsdom": "26.1.0",