diff --git a/app/package-lock.json b/app/package-lock.json
index 9ff196bc..184a0b19 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -25,9 +25,9 @@
 			"license": "MIT"
 		},
 		"node_modules/@sap/approuter": {
-			"version": "21.0.0",
-			"resolved": "https://registry.npmjs.org/@sap/approuter/-/approuter-21.0.0.tgz",
-			"integrity": "sha512-TgelDqBuHJ8gMXzVS7aFE/5fagTiFWouoH9d0u8V9qhClFHNYF/HnDwYwydZsEvl56cmr0mlKE8V6PH/zDkeNA==",
+			"version": "21.1.0",
+			"resolved": "https://registry.npmjs.org/@sap/approuter/-/approuter-21.1.0.tgz",
+			"integrity": "sha512-4jdCaiIJDlKTLByYsa3w1QdCS8o3b6jp+Eqjz6MRef/OyUjJFDI7NOQuITYx7n23L1McHajqtm4rfNqeYa17FQ==",
 			"license": "SEE LICENSE IN LICENSE",
 			"dependencies": {
 				"@sap/audit-logging": "7.0.0",
@@ -54,8 +54,8 @@
 				"deepmerge": "2.2.1",
 				"encodeurl": "1.0.2",
 				"express-session": "1.18.2",
-				"http-proxy-agent": "4.0.1",
-				"https-proxy-agent": "5.0.1",
+				"http-proxy-agent": "7.0.2",
+				"https-proxy-agent": "7.0.6",
 				"ioredis": "5.6.1",
 				"jwt-decode": "2.2.0",
 				"lodash": "4.17.23",
@@ -237,15 +237,6 @@
 				"node": ">=18"
 			}
 		},
-		"node_modules/@tootallnate/once": {
-			"version": "1.1.2",
-			"resolved": "https://registry.npmjs.org/@tootallnate/once/-/once-1.1.2.tgz",
-			"integrity": "sha512-RbzJvlNzmRq5c3O09UipeuXno4tA1FE6ikOjxZK0tuxVv3412l64l5t1W5pj4+rJq9vpkm/kwiR07aZXnsKPxw==",
-			"license": "MIT",
-			"engines": {
-				"node": ">= 6"
-			}
-		},
 		"node_modules/@types/triple-beam": {
 			"version": "1.3.5",
 			"resolved": "https://registry.npmjs.org/@types/triple-beam/-/triple-beam-1.3.5.tgz",
@@ -1153,54 +1144,29 @@
 			}
 		},
 		"node_modules/http-proxy-agent": {
-			"version": "4.0.1",
-			"resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-4.0.1.tgz",
-			"integrity": "sha512-k0zdNgqWTGA6aeIRVpvfVob4fL52dTfaehylg0Y4UvSySvOq/Y+BOyPrgpUrA7HylqvU8vIZGsRuXmspskV0Tg==",
+			"version": "7.0.2",
+			"resolved": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-7.0.2.tgz",
+			"integrity": "sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==",
 			"license": "MIT",
 			"dependencies": {
-				"@tootallnate/once": "1",
-				"agent-base": "6",
-				"debug": "4"
+				"agent-base": "^7.1.0",
+				"debug": "^4.3.4"
 			},
 			"engines": {
-				"node": ">= 6"
-			}
-		},
-		"node_modules/http-proxy-agent/node_modules/agent-base": {
-			"version": "6.0.2",
-			"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
-			"integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
-			"license": "MIT",
-			"dependencies": {
-				"debug": "4"
-			},
-			"engines": {
-				"node": ">= 6.0.0"
+				"node": ">= 14"
 			}
 		},
 		"node_modules/https-proxy-agent": {
-			"version": "5.0.1",
-			"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
-			"integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
+			"version": "7.0.6",
+			"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-7.0.6.tgz",
+			"integrity": "sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==",
 			"license": "MIT",
 			"dependencies": {
-				"agent-base": "6",
+				"agent-base": "^7.1.2",
 				"debug": "4"
 			},
 			"engines": {
-				"node": ">= 6"
-			}
-		},
-		"node_modules/https-proxy-agent/node_modules/agent-base": {
-			"version": "6.0.2",
-			"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
-			"integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
-			"license": "MIT",
-			"dependencies": {
-				"debug": "4"
-			},
-			"engines": {
-				"node": ">= 6.0.0"
+				"node": ">= 14"
 			}
 		},
 		"node_modules/humanize-ms": {
diff --git a/mtx/sidecar/package-lock.json b/mtx/sidecar/package-lock.json
index 89a4dff9..2db2c24e 100644
--- a/mtx/sidecar/package-lock.json
+++ b/mtx/sidecar/package-lock.json
@@ -218,9 +218,9 @@
       }
     },
     "node_modules/@sap/xssec": {
-      "version": "4.12.2",
-      "resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.12.2.tgz",
-      "integrity": "sha512-T4yy/lXZerAREJnb2Yte3oL4iDJOKlmWrMwMLXY5/U33tuKDVzIVO3VQqfLTGTIJABk4msE+km0YWpds+fSv3w==",
+      "version": "4.13.0",
+      "resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.13.0.tgz",
+      "integrity": "sha512-8e+bU+OyAIpAGXQanOopZa5YEK+yHKw84dhhihcCotF40MSNFbVHjQ4xM5hf4QndlqDGfXIuvXmoOMuDATa/gA==",
       "license": "SAP DEVELOPER LICENSE AGREEMENT",
       "dependencies": {
         "debug": "^4.4.3",
diff --git a/package-lock.json b/package-lock.json
index b94dabbf..2fa22411 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,11 +20,11 @@
 				"@cap-js/hana": "^2",
 				"@sap/cds": "^9",
 				"@sap/cds-mtxs": "^3",
-				"@sap/xssec": "^4",
+				"@sap/xssec": "^4.13.0",
 				"express": "^4"
 			},
 			"devDependencies": {
-				"@cap-js/sqlite": "^2.2.0"
+				"@cap-js/sqlite": "^2"
 			},
 			"engines": {
 				"node": "^22"
@@ -2226,9 +2226,9 @@
 			}
 		},
 		"node_modules/@sap/xssec": {
-			"version": "4.12.2",
-			"resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.12.2.tgz",
-			"integrity": "sha512-T4yy/lXZerAREJnb2Yte3oL4iDJOKlmWrMwMLXY5/U33tuKDVzIVO3VQqfLTGTIJABk4msE+km0YWpds+fSv3w==",
+			"version": "4.13.0",
+			"resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.13.0.tgz",
+			"integrity": "sha512-8e+bU+OyAIpAGXQanOopZa5YEK+yHKw84dhhihcCotF40MSNFbVHjQ4xM5hf4QndlqDGfXIuvXmoOMuDATa/gA==",
 			"license": "SAP DEVELOPER LICENSE AGREEMENT",
 			"dependencies": {
 				"debug": "^4.4.3",