diff --git a/src/package-lock.json b/src/package-lock.json
index 4cba12fd527..2101e1df05c 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.0.1",
       "license": "Apache-2.0",
       "devDependencies": {
-        "ejs": "3.1.10",
+        "ejs": "4.0.1",
         "fs-extra": "11.3.3",
         "jsdom": "27.4.0",
         "node-fetch": "3.3.2",
@@ -743,19 +743,19 @@
       "license": "BSD-3-Clause"
     },
     "node_modules/ejs": {
-      "version": "3.1.10",
-      "resolved": "https://registry.npmjs.org/ejs/-/ejs-3.1.10.tgz",
-      "integrity": "sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/ejs/-/ejs-4.0.1.tgz",
+      "integrity": "sha512-krvQtxc0btwSm/nvnt1UpnaFDFVJpJ0fdckmALpCgShsr/iGYHTnJiUliZTgmzq/UxTX33TtOQVKaNigMQp/6Q==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "jake": "^10.8.5"
+        "jake": "^10.9.1"
       },
       "bin": {
         "ejs": "bin/cli.js"
       },
       "engines": {
-        "node": ">=0.10.0"
+        "node": ">=0.12.18"
       }
     },
     "node_modules/emoji-regex": {
diff --git a/src/package.json b/src/package.json
index 8479bbab37d..1e1429f05fc 100644
--- a/src/package.json
+++ b/src/package.json
@@ -35,7 +35,7 @@
     "timestamps": "node ./tools/generate/generate_timestamps"
   },
   "devDependencies": {
-    "ejs": "3.1.10",
+    "ejs": "4.0.1",
     "fs-extra": "11.3.3",
     "jsdom": "27.4.0",
     "node-fetch": "3.3.2",