diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0b0454a51..675876132 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -22,7 +22,7 @@ overrides:
   lodash@<4.18.0: ^4.18.0
   protobufjs@<7.6.5: ^7.6.5
   ws@>=8.0.0 <8.21.0: ^8.21.0
-  js-yaml@<3.15.0: ^3.15.0
+  js-yaml@<3.15.0: ^4.3.1
   js-yaml@>=4.0.0 <4.3.0: ^4.3.0
   minimatch@<3.1.3: ^3.1.3
   minimatch@>=9.0.0 <9.0.7: ^9.0.7
@@ -3787,11 +3787,6 @@ packages:
     resolution: {integrity: sha512-oruZaFkjorTpF32kDSI5/75ViwGeZginGGy2NoOSg3Q9bnwlnmDm4HLnkl0RE3n+njDXR037aY1+x58Z/zFdwQ==}
     engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
 
-  esprima@4.0.1:
-    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
-    engines: {node: '>=4'}
-    hasBin: true
-
   esquery@1.5.0:
     resolution: {integrity: sha512-YQLXUplAwJgCydQ78IMJywZCceoqk1oH01OERdSAJc/7U2AylwjhSCLDEtqwg811idIS/9fIU5GjG73IgjKMVg==}
     engines: {node: '>=0.10'}
@@ -4320,14 +4315,14 @@ packages:
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
-  js-yaml@3.15.0:
-    resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==}
-    hasBin: true
-
   js-yaml@4.3.0:
     resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
+  js-yaml@4.3.1:
+    resolution: {integrity: sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==}
+    hasBin: true
+
   jsep@1.4.0:
     resolution: {integrity: sha512-B7qPcEVE3NVkmSJbaYxvv4cHkVW7DQsZz13pUMrfS8z8Q/BuShN+gcTXrUlPiGqM2/t/EEaI030bpxMqY8gMlw==}
     engines: {node: '>= 10.16.0'}
@@ -7913,8 +7908,6 @@ snapshots:
       acorn-jsx: 5.3.2(acorn@8.15.0)
       eslint-visitor-keys: 3.4.3
 
-  esprima@4.0.1: {}
-
   esquery@1.5.0:
     dependencies:
       estraverse: 5.3.0
@@ -8461,12 +8454,11 @@ snapshots:
 
   js-tokens@4.0.0: {}
 
-  js-yaml@3.15.0:
+  js-yaml@4.3.0:
     dependencies:
-      argparse: 1.0.10
-      esprima: 4.0.1
+      argparse: 2.0.1
 
-  js-yaml@4.3.0:
+  js-yaml@4.3.1:
     dependencies:
       argparse: 2.0.1
 
@@ -9022,7 +9014,7 @@ snapshots:
   read-yaml-file@1.1.0:
     dependencies:
       graceful-fs: 4.2.11
-      js-yaml: 3.15.0
+      js-yaml: 4.3.1
       pify: 4.0.1
       strip-bom: 3.0.0
 
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index a280a7c90..a64ecff70 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -20,6 +20,8 @@ minimumReleaseAgeExclude:
   - '@opentelemetry/core@2.8.0'
   # Renovate security update: brace-expansion@5.0.8
   - brace-expansion@5.0.8
+  # Renovate security update: js-yaml@4.3.1
+  - js-yaml@4.3.1
 
 catalog:
   '@livekit/rtc-node': ^0.13.33
@@ -37,7 +39,7 @@ overrides:
   'lodash@<4.18.0': ^4.18.0
   'protobufjs@<7.6.5': ^7.6.5
   'ws@>=8.0.0 <8.21.0': ^8.21.0
-  'js-yaml@<3.15.0': ^3.15.0
+  'js-yaml@<3.15.0': ^4.3.1
   'js-yaml@>=4.0.0 <4.3.0': ^4.3.0
   'minimatch@<3.1.3': ^3.1.3
   'minimatch@>=9.0.0 <9.0.7': ^9.0.7