diff --git a/packages/graphql/package.json b/packages/graphql/package.json
index abe0cfcaf..c0dc35195 100644
--- a/packages/graphql/package.json
+++ b/packages/graphql/package.json
@@ -31,7 +31,7 @@
     "subscriptions-transport-ws": "0.11.0",
     "tslib": "2.6.2",
     "uuid": "9.0.1",
-    "ws": "8.16.0"
+    "ws": "8.17.1"
   },
   "devDependencies": {
     "@apollo/subgraph": "2.2.3",
diff --git a/yarn.lock b/yarn.lock
index f3acff841..f93ab3d46 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -11316,10 +11316,10 @@ write-pkg@4.0.0:
     type-fest "^0.4.1"
     write-json-file "^3.2.0"
 
-ws@8.16.0:
-  version "8.16.0"
-  resolved "https://registry.yarnpkg.com/ws/-/ws-8.16.0.tgz#d1cd774f36fbc07165066a60e40323eab6446fd4"
-  integrity sha512-HS0c//TP7Ina87TfiPUz1rQzMhHrl/SG2guqRcTOIUYD2q8uhUdNHZYJUaQ8aTGPzCh+c6oawMKW35nFl1dxyQ==
+ws@8.17.1:
+  version "8.17.1"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-8.17.1.tgz#9293da530bb548febc95371d90f9c878727d919b"
+  integrity sha512-6XQFvXTkbfUOZOKKILFG1PDK2NDQs4azKQl26T0YS5CxqWLgXajbPZ+h4gZekJyRqFU8pvnbAbbs/3TgRPy+GQ==
 
 "ws@^5.2.0 || ^6.0.0 || ^7.0.0":
   version "7.5.9"