diff --git a/packages/libs/codegen/package.json b/packages/libs/codegen/package.json
index 64500b2480..7190f0ef41 100644
--- a/packages/libs/codegen/package.json
+++ b/packages/libs/codegen/package.json
@@ -55,7 +55,7 @@
   },
   "dependencies": {
     "@azure-tools/async-io": "~3.0.0",
-    "js-yaml": "~4.1.0",
+    "js-yaml": "~4.2.0",
     "semver": "^7.7.2"
   }
 }
diff --git a/packages/libs/codemodel/package.json b/packages/libs/codemodel/package.json
index de13d54633..025d3afb9d 100644
--- a/packages/libs/codemodel/package.json
+++ b/packages/libs/codemodel/package.json
@@ -53,7 +53,7 @@
   },
   "dependencies": {
     "@azure-tools/codegen": "workspace:~",
-    "js-yaml": "~4.1.0"
+    "js-yaml": "~4.2.0"
   },
   "publishConfig": {
     "access": "public"
diff --git a/packages/libs/extension-base/package.json b/packages/libs/extension-base/package.json
index 9d7b3317e8..4efc6dbcf0 100644
--- a/packages/libs/extension-base/package.json
+++ b/packages/libs/extension-base/package.json
@@ -45,7 +45,7 @@
     "typescript": "~5.8.3"
   },
   "dependencies": {
-    "js-yaml": "~4.1.0",
+    "js-yaml": "~4.2.0",
     "vscode-jsonrpc": "^3.5.0",
     "@azure-tools/codegen": "workspace:~"
   }
diff --git a/packages/libs/yaml/package.json b/packages/libs/yaml/package.json
index 0eeac1a94e..0b66265bdf 100644
--- a/packages/libs/yaml/package.json
+++ b/packages/libs/yaml/package.json
@@ -44,7 +44,7 @@
     "typescript": "~5.8.3"
   },
   "dependencies": {
-    "js-yaml": "~4.1.0",
+    "js-yaml": "~4.2.0",
     "lodash": "^4.18.1",
     "yaml-ast-parser": "0.0.43"
   }
diff --git a/packages/tools/compare/package.json b/packages/tools/compare/package.json
index 4e89a750ad..459c29e0eb 100644
--- a/packages/tools/compare/package.json
+++ b/packages/tools/compare/package.json
@@ -32,7 +32,7 @@
     "autorest": "workspace:~",
     "chalk": "^4.1.0",
     "diff": "^5.1.0",
-    "js-yaml": "~4.1.0",
+    "js-yaml": "~4.2.0",
     "source-map-support": "^0.5.19",
     "tree-sitter": "^0.22.4",
     "tree-sitter-python": "0.23.6",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 0528353be9..4aabf068fd 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -561,8 +561,8 @@ importers:
         specifier: ~3.0.0
         version: 3.0.254
       js-yaml:
-        specifier: ~4.1.0
-        version: 4.1.1
+        specifier: ~4.2.0
+        version: 4.2.0
       semver:
         specifier: ^7.7.2
         version: 7.8.3
@@ -625,8 +625,8 @@ importers:
         specifier: workspace:~
         version: link:../codegen
       js-yaml:
-        specifier: ~4.1.0
-        version: 4.1.1
+        specifier: ~4.2.0
+        version: 4.2.0
     devDependencies:
       '@types/js-yaml':
         specifier: ~4.0.0
@@ -1060,8 +1060,8 @@ importers:
         specifier: workspace:~
         version: link:../codegen
       js-yaml:
-        specifier: ~4.1.0
-        version: 4.1.1
+        specifier: ~4.2.0
+        version: 4.2.0
       vscode-jsonrpc:
         specifier: ^3.5.0
         version: 3.6.2
@@ -1367,8 +1367,8 @@ importers:
   packages/libs/yaml:
     dependencies:
       js-yaml:
-        specifier: ~4.1.0
-        version: 4.1.1
+        specifier: ~4.2.0
+        version: 4.2.0
       lodash:
         specifier: ^4.18.1
         version: 4.18.1
@@ -1541,8 +1541,8 @@ importers:
         specifier: ^5.1.0
         version: 5.2.2
       js-yaml:
-        specifier: ~4.1.0
-        version: 4.1.1
+        specifier: ~4.2.0
+        version: 4.2.0
       source-map-support:
         specifier: ^0.5.19
         version: 0.5.21
@@ -4201,14 +4201,18 @@ packages:
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
-  js-yaml@3.14.2:
-    resolution: {integrity: sha512-PMSmkqxr106Xa156c2M265Z+FTrPl+oxd/rgOQy2tijQeK5TxQ43psO1ZCwhVOSdnn+RzkzlRz/eY4BgJBYVpg==}
+  js-yaml@3.15.0:
+    resolution: {integrity: sha512-ttBQIIQPDeLjpPOohtUdXuXUVoA2uIB6fEH9HyJ7234s5mBJ5wTx20njxplLZQgLaOfpmPQA7X2t5AX6tIPbog==}
     hasBin: true
 
   js-yaml@4.1.1:
     resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
     hasBin: true
 
+  js-yaml@4.2.0:
+    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
+    hasBin: true
+
   jsep@1.4.0:
     resolution: {integrity: sha512-B7qPcEVE3NVkmSJbaYxvv4cHkVW7DQsZz13pUMrfS8z8Q/BuShN+gcTXrUlPiGqM2/t/EEaI030bpxMqY8gMlw==}
     engines: {node: '>= 10.16.0'}
@@ -6025,7 +6029,7 @@ snapshots:
       globals: 13.24.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.1.1
+      js-yaml: 4.2.0
       minimatch: 3.1.5
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -6184,7 +6188,7 @@ snapshots:
       camelcase: 5.3.1
       find-up: 4.1.0
       get-package-type: 0.1.0
-      js-yaml: 3.14.2
+      js-yaml: 3.15.0
       resolve-from: 5.0.0
 
   '@istanbuljs/schema@0.1.6': {}
@@ -8913,7 +8917,7 @@ snapshots:
 
   js-tokens@4.0.0: {}
 
-  js-yaml@3.14.2:
+  js-yaml@3.15.0:
     dependencies:
       argparse: 1.0.10
       esprima: 4.0.1
@@ -8922,6 +8926,10 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  js-yaml@4.2.0:
+    dependencies:
+      argparse: 2.0.1
+
   jsep@1.4.0: {}
 
   jsesc@0.5.0: {}