diff --git a/apps/cli/package.json b/apps/cli/package.json
index a6c099826c5..4b650e58805 100644
--- a/apps/cli/package.json
+++ b/apps/cli/package.json
@@ -72,7 +72,7 @@
     "inquirer": "8.2.6",
     "jsdom": "26.0.0",
     "jszip": "3.10.1",
-    "koa": "2.15.3",
+    "koa": "2.15.4",
     "koa-bodyparser": "4.4.1",
     "koa-json": "2.0.2",
     "lowdb": "1.0.0",
diff --git a/package-lock.json b/package-lock.json
index c721bc6e9bc..1431f31daac 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -48,7 +48,7 @@
         "jquery": "3.7.1",
         "jsdom": "26.0.0",
         "jszip": "3.10.1",
-        "koa": "2.15.3",
+        "koa": "2.15.4",
         "koa-bodyparser": "4.4.1",
         "koa-json": "2.0.2",
         "lit": "3.2.1",
@@ -209,7 +209,7 @@
         "inquirer": "8.2.6",
         "jsdom": "26.0.0",
         "jszip": "3.10.1",
-        "koa": "2.15.3",
+        "koa": "2.15.4",
         "koa-bodyparser": "4.4.1",
         "koa-json": "2.0.2",
         "lowdb": "1.0.0",
@@ -24433,9 +24433,9 @@
       }
     },
     "node_modules/koa": {
-      "version": "2.15.3",
-      "resolved": "https://registry.npmjs.org/koa/-/koa-2.15.3.tgz",
-      "integrity": "sha512-j/8tY9j5t+GVMLeioLaxweJiKUayFhlGqNTzf2ZGwL0ZCQijd2RLHK0SLW5Tsko8YyyqCZC2cojIb0/s62qTAg==",
+      "version": "2.15.4",
+      "resolved": "https://registry.npmjs.org/koa/-/koa-2.15.4.tgz",
+      "integrity": "sha512-7fNBIdrU2PEgLljXoPWoyY4r1e+ToWCmzS/wwMPbUNs7X+5MMET1ObhJBlUkF5uZG9B6QhM2zS1TsH6adegkiQ==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^1.3.5",
diff --git a/package.json b/package.json
index 32b5b2b6af3..54b1f642086 100644
--- a/package.json
+++ b/package.json
@@ -178,7 +178,7 @@
     "jquery": "3.7.1",
     "jsdom": "26.0.0",
     "jszip": "3.10.1",
-    "koa": "2.15.3",
+    "koa": "2.15.4",
     "koa-bodyparser": "4.4.1",
     "koa-json": "2.0.2",
     "lit": "3.2.1",