diff --git a/code/build/package-lock.json b/code/build/package-lock.json
index fc53efb9948a..3018242701d1 100644
--- a/code/build/package-lock.json
+++ b/code/build/package-lock.json
@@ -4318,9 +4318,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
diff --git a/code/build/package.json b/code/build/package.json
index 5bbff1232b00..6543f9e1c00d 100644
--- a/code/build/package.json
+++ b/code/build/package.json
@@ -87,6 +87,7 @@
       "form-data": "^4.0.6"
     },
     "form-data@4": "^4.0.6",
+    "js-yaml": "^4.3.1",
     "brace-expansion@2": "^2.1.4"
   }
 }
diff --git a/code/extensions/che-api/package-lock.json b/code/extensions/che-api/package-lock.json
index 6aa0d4314334..cdfc7f943681 100644
--- a/code/extensions/che-api/package-lock.json
+++ b/code/extensions/che-api/package-lock.json
@@ -14,7 +14,7 @@
         "@kubernetes/client-node": "^1.4.0",
         "fs-extra": "^11.2.0",
         "inversify": "^6.0.2",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "reflect-metadata": "^0.2.2",
         "vscode-nls": "^5.0.0"
       },
@@ -615,9 +615,9 @@
       }
     },
     "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3329,9 +3329,20 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/code/extensions/che-api/package.json b/code/extensions/che-api/package.json
index e6991021efc8..fd10f46565f9 100644
--- a/code/extensions/che-api/package.json
+++ b/code/extensions/che-api/package.json
@@ -35,7 +35,7 @@
     "@kubernetes/client-node": "^1.4.0",
     "fs-extra": "^11.2.0",
     "inversify": "^6.0.2",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "reflect-metadata": "^0.2.2",
     "vscode-nls": "^5.0.0"
   },
@@ -69,6 +69,7 @@
     "axios": {
       "form-data": "^4.0.6"
     },
+    "js-yaml@3": "^3.15.0",
     "brace-expansion@1": "^1.1.18"
   },
   "repository": {
diff --git a/code/extensions/che-commands/package-lock.json b/code/extensions/che-commands/package-lock.json
index 6b7f56e26e80..2af589bb34f7 100644
--- a/code/extensions/che-commands/package-lock.json
+++ b/code/extensions/che-commands/package-lock.json
@@ -12,7 +12,7 @@
         "@devfile/api": "^2.3.0-1738854228",
         "@kubernetes/client-node": "^1.4.0",
         "fs-extra": "^11.2.0",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "reflect-metadata": "^0.2.2",
         "vscode-nls": "^5.0.0"
       },
@@ -590,9 +590,20 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/code/extensions/che-commands/package.json b/code/extensions/che-commands/package.json
index 30255130c924..2a08627f3e56 100644
--- a/code/extensions/che-commands/package.json
+++ b/code/extensions/che-commands/package.json
@@ -33,7 +33,7 @@
     "reflect-metadata": "^0.2.2",
     "fs-extra": "^11.2.0",
     "vscode-nls": "^5.0.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "@devfile/api": "^2.3.0-1738854228",
     "@kubernetes/client-node": "^1.4.0"
   },
diff --git a/code/extensions/che-github-authentication/package-lock.json b/code/extensions/che-github-authentication/package-lock.json
index 68d106698dd4..20d35a49d1cd 100644
--- a/code/extensions/che-github-authentication/package-lock.json
+++ b/code/extensions/che-github-authentication/package-lock.json
@@ -950,9 +950,20 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/code/extensions/che-github-authentication/package.json b/code/extensions/che-github-authentication/package.json
index 0d1e0e34164f..81bf5d94189e 100644
--- a/code/extensions/che-github-authentication/package.json
+++ b/code/extensions/che-github-authentication/package.json
@@ -75,7 +75,8 @@
     },
     "@types/node-fetch": {
       "form-data": "^4.0.6"
-    }
+    },
+    "js-yaml": "^4.3.1"
   },
   "repository": {
     "type": "git",
diff --git a/code/extensions/che-port/package-lock.json b/code/extensions/che-port/package-lock.json
index e000ea912c8c..6b5c3b5e3e8a 100644
--- a/code/extensions/che-port/package-lock.json
+++ b/code/extensions/che-port/package-lock.json
@@ -2983,9 +2983,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
diff --git a/code/extensions/che-port/package.json b/code/extensions/che-port/package.json
index 0f8d29c7fbde..62fb4de42d9a 100644
--- a/code/extensions/che-port/package.json
+++ b/code/extensions/che-port/package.json
@@ -53,6 +53,7 @@
     },
     "minimatch": "^3.1.5",
     "handlebars": "4.7.9",
+    "js-yaml": "^3.15.0",
     "brace-expansion@1": "^1.1.18"
   },
   "repository": {
diff --git a/code/extensions/che-remote/package-lock.json b/code/extensions/che-remote/package-lock.json
index c1633ee5f369..27323eb8bfb2 100644
--- a/code/extensions/che-remote/package-lock.json
+++ b/code/extensions/che-remote/package-lock.json
@@ -12,7 +12,7 @@
         "@eclipse-che/che-devworkspace-generator": "7.113.0",
         "axios": "^1.17.0",
         "https": "^1.0.0",
-        "js-yaml": "^4.0.0",
+        "js-yaml": "^4.3.1",
         "vscode-nls": "^5.0.0"
       },
       "devDependencies": {
@@ -774,9 +774,9 @@
       }
     },
     "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -3747,9 +3747,20 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/code/extensions/che-remote/package.json b/code/extensions/che-remote/package.json
index a402561c4822..4246698b0b35 100644
--- a/code/extensions/che-remote/package.json
+++ b/code/extensions/che-remote/package.json
@@ -35,7 +35,7 @@
     "axios": "^1.17.0",
     "@eclipse-che/che-devworkspace-generator": "7.113.0",
     "https": "^1.0.0",
-    "js-yaml": "^4.0.0"
+    "js-yaml": "^4.3.1"
   },
   "devDependencies": {
     "jest": "29.7.0",
@@ -66,6 +66,7 @@
     "axios": {
       "form-data": "^4.0.6"
     },
+    "js-yaml@3": "^3.15.0",
     "brace-expansion@1": "^1.1.18"
   },
   "repository": {
diff --git a/code/extensions/che-resource-monitor/package-lock.json b/code/extensions/che-resource-monitor/package-lock.json
index e0e18dc8d182..97c91cc585d9 100644
--- a/code/extensions/che-resource-monitor/package-lock.json
+++ b/code/extensions/che-resource-monitor/package-lock.json
@@ -591,9 +591,9 @@
       }
     },
     "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.2",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
-      "integrity": "sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -1029,6 +1029,28 @@
         "node": ">= 6"
       }
     },
+    "node_modules/@kubernetes/client-node/node_modules/js-yaml": {
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.js"
+      }
+    },
     "node_modules/@kubernetes/client-node/node_modules/undici-types": {
       "version": "7.16.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
@@ -3300,18 +3322,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
-      "license": "MIT",
-      "dependencies": {
-        "argparse": "^2.0.1"
-      },
-      "bin": {
-        "js-yaml": "bin/js-yaml.js"
-      }
-    },
     "node_modules/jsep": {
       "version": "1.4.0",
       "resolved": "https://registry.npmjs.org/jsep/-/jsep-1.4.0.tgz",
diff --git a/code/extensions/che-resource-monitor/package.json b/code/extensions/che-resource-monitor/package.json
index b3a14e851a70..f26b07c1e989 100644
--- a/code/extensions/che-resource-monitor/package.json
+++ b/code/extensions/che-resource-monitor/package.json
@@ -60,6 +60,8 @@
     "@types/node-fetch": {
       "form-data": "^4.0.6"
     },
+    "js-yaml@3": "^3.15.0",
+    "js-yaml@4": "^4.3.1",
     "brace-expansion@1": "^1.1.18"
   },
   "repository": {
diff --git a/code/extensions/che-terminal/package-lock.json b/code/extensions/che-terminal/package-lock.json
index 7b2b8be126e6..e3c8d1d13562 100644
--- a/code/extensions/che-terminal/package-lock.json
+++ b/code/extensions/che-terminal/package-lock.json
@@ -10,7 +10,7 @@
       "license": "EPL-2.0",
       "dependencies": {
         "fs-extra": "^11.2.0",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "vscode-nls": "^5.2.0",
         "ws": "^8.21.0"
       },
@@ -81,9 +81,20 @@
       "integrity": "sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ=="
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/code/extensions/che-terminal/package.json b/code/extensions/che-terminal/package.json
index e857502fc1ae..6b63bcbba868 100644
--- a/code/extensions/che-terminal/package.json
+++ b/code/extensions/che-terminal/package.json
@@ -40,7 +40,7 @@
     },
   "dependencies": {
     "fs-extra": "^11.2.0",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "vscode-nls": "^5.2.0",
     "ws": "^8.21.0"
   },
diff --git a/code/extensions/copilot/package-lock.json b/code/extensions/copilot/package-lock.json
index 756409661da9..4adcbce3d58c 100644
--- a/code/extensions/copilot/package-lock.json
+++ b/code/extensions/copilot/package-lock.json
@@ -106,7 +106,7 @@
         "esbuild": "0.28.1",
         "fastq": "^1.19.1",
         "glob": "^11.1.0",
-        "js-yaml": "^4.3.0",
+        "js-yaml": "^4.3.1",
         "minimist": "^1.2.8",
         "mobx": "^6.13.7",
         "mobx-react-lite": "^4.1.0",
@@ -11506,9 +11506,9 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "dev": true,
       "funding": [
         {
diff --git a/code/extensions/copilot/package.json b/code/extensions/copilot/package.json
index 7539f79fd3f9..40760068ad15 100644
--- a/code/extensions/copilot/package.json
+++ b/code/extensions/copilot/package.json
@@ -7161,7 +7161,7 @@
     "esbuild": "0.28.1",
     "fastq": "^1.19.1",
     "glob": "^11.1.0",
-    "js-yaml": "^4.3.0",
+    "js-yaml": "^4.3.1",
     "minimist": "^1.2.8",
     "mobx": "^6.13.7",
     "mobx-react-lite": "^4.1.0",
diff --git a/code/package-lock.json b/code/package-lock.json
index e2eeaef50f87..dc26ab8d6bdd 100644
--- a/code/package-lock.json
+++ b/code/package-lock.json
@@ -55,7 +55,7 @@
         "detect-libc": "^2.1.2",
         "http-proxy-agent": "^7.0.0",
         "https-proxy-agent": "^7.0.2",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "jschardet": "3.1.4",
         "katex": "^0.16.22",
         "kerberos": "2.1.1",
@@ -12367,9 +12367,9 @@
       "license": "MIT"
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "funding": [
         {
           "type": "github",
diff --git a/code/package.json b/code/package.json
index ff7e858e1541..cc6b996cbee6 100644
--- a/code/package.json
+++ b/code/package.json
@@ -159,7 +159,7 @@
     "yauzl": "^3.3.1",
     "yazl": "^2.4.3",
     "zod": "^3.25.76",
-    "js-yaml": "^4.1.0"
+    "js-yaml": "^4.3.1"
   },
   "devDependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.198",
diff --git a/code/remote/package-lock.json b/code/remote/package-lock.json
index 42195e3dca62..8e0acff12c7e 100644
--- a/code/remote/package-lock.json
+++ b/code/remote/package-lock.json
@@ -42,7 +42,7 @@
         "detect-libc": "^2.1.2",
         "http-proxy-agent": "^7.0.0",
         "https-proxy-agent": "^7.0.2",
-        "js-yaml": "^4.1.0",
+        "js-yaml": "^4.3.1",
         "jschardet": "3.1.4",
         "katex": "^0.16.22",
         "kerberos": "2.1.1",
@@ -1664,9 +1664,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.3.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.0.tgz",
-      "integrity": "sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "funding": [
         {
           "type": "github",
diff --git a/code/remote/package.json b/code/remote/package.json
index b9394dbb17b8..c905fa25de5f 100644
--- a/code/remote/package.json
+++ b/code/remote/package.json
@@ -52,7 +52,7 @@
     "yauzl": "^3.3.1",
     "yazl": "^2.4.3",
     "zod": "^3.25.76",
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "@kubernetes/client-node": "^1.4.0"
   },
   "overrides": {
diff --git a/code/test/sanity/package-lock.json b/code/test/sanity/package-lock.json
index 574da98c8e3b..1b14572350ae 100644
--- a/code/test/sanity/package-lock.json
+++ b/code/test/sanity/package-lock.json
@@ -588,9 +588,9 @@
       }
     },
     "node_modules/js-yaml": {
-      "version": "4.2.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.2.0.tgz",
-      "integrity": "sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
       "funding": [
         {
           "type": "github",
diff --git a/code/test/sanity/package.json b/code/test/sanity/package.json
index fda50b7b51c1..ba965930ae72 100644
--- a/code/test/sanity/package.json
+++ b/code/test/sanity/package.json
@@ -23,6 +23,7 @@
   },
   "overrides": {
     "serialize-javascript": "^7.0.3",
+    "js-yaml": "^4.3.1",
     "brace-expansion@2": "^2.1.4"
   }
 }
diff --git a/launcher/package-lock.json b/launcher/package-lock.json
index 4dca0b3d7cab..8c1d54b0b810 100644
--- a/launcher/package-lock.json
+++ b/launcher/package-lock.json
@@ -9,7 +9,7 @@
       "version": "0.0.1",
       "dependencies": {
         "@kubernetes/client-node": "^1.4.0",
-        "js-yaml": "^4.1.0"
+        "js-yaml": "^4.3.1"
       },
       "bin": {
         "che-code-launcher": "out/entrypoint.js"
@@ -740,10 +740,11 @@
       }
     },
     "node_modules/@eslint/eslintrc/node_modules/js-yaml": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "argparse": "^1.0.7",
         "esprima": "^4.0.0"
@@ -800,10 +801,11 @@
       }
     },
     "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "argparse": "^1.0.7",
         "esprima": "^4.0.0"
@@ -2460,10 +2462,11 @@
       }
     },
     "node_modules/eslint/node_modules/js-yaml": {
-      "version": "3.14.1",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
-      "integrity": "sha512-okMH7OXXJ7YrN9Ok3/SXrnu4iX9yOk+25nqX4imS2npuvTYDmo/QEZoqwZkYaIDk3jVvBOTOIEgEhaLOynBS9g==",
+      "version": "3.15.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.15.0.tgz",
+      "integrity": "sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "argparse": "^1.0.7",
         "esprima": "^4.0.0"
@@ -3928,9 +3931,20 @@
       "dev": true
     },
     "node_modules/js-yaml": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
-      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "version": "4.3.1",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.3.1.tgz",
+      "integrity": "sha512-CY6crGq313MX8GkwvB7tzgp99vjQxY1++5y10/BKN/GUfHqWaOGQMNZkBvqSzsZKWk/ijwHlWzzkLulsGHhjWQ==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
+      "license": "MIT",
       "dependencies": {
         "argparse": "^2.0.1"
       },
diff --git a/launcher/package.json b/launcher/package.json
index cfc9184a7fdf..45cb7794d2c3 100644
--- a/launcher/package.json
+++ b/launcher/package.json
@@ -31,7 +31,7 @@
     "url": "git+https://github.com/che-incubator/che-code.git"
   },
   "dependencies": {
-    "js-yaml": "^4.1.0",
+    "js-yaml": "^4.3.1",
     "@kubernetes/client-node": "^1.4.0"
   },
   "devDependencies": {
@@ -60,6 +60,7 @@
     "@types/node-fetch": {
       "form-data": "^4.0.6"
     },
+    "js-yaml@3": "^3.15.0",
     "brace-expansion@1": "^1.1.18"
   },
   "jest": {