diff --git a/package.json b/package.json
index 83cacce..2439cb3 100644
--- a/package.json
+++ b/package.json
@@ -23,7 +23,7 @@
     "@js-joda/timezone": "2.5.0",
     "abort-controller": "3.0.0",
     "express": "4.21.0",
-    "html-entities": "2.5.2",
+    "html-entities": "2.6.0",
     "http-errors": "2.0.0",
     "http-status-codes": "2.3.0",
     "jsonata": "1.8.7",
diff --git a/yarn.lock b/yarn.lock
index 93aa49e..a220d58 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1379,6 +1379,11 @@ html-entities@2.5.2:
   resolved "https://registry.yarnpkg.com/html-entities/-/html-entities-2.5.2.tgz#201a3cf95d3a15be7099521620d19dfb4f65359f"
   integrity sha512-K//PSRMQk4FZ78Kyau+mZurHn3FH0Vwr+H36eE0rPbeYkRRi9YxceYPhuN60UwWorxyKHhqoAJl2OFKa4BVtaA==
 
+html-entities@2.6.0:
+  version "2.6.0"
+  resolved "https://registry.yarnpkg.com/html-entities/-/html-entities-2.6.0.tgz#7c64f1ea3b36818ccae3d3fb48b6974208e984f8"
+  integrity sha512-kig+rMn/QOVRvr7c86gQ8lWXq+Hkv6CbAH1hLu+RG338StTpE8Z0b44SDVaqVu7HGKf27frdmUYEs9hTUX/cLQ==
+
 http-errors@2.0.0:
   version "2.0.0"
   resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-2.0.0.tgz#b7774a1486ef73cf7667ac9ae0858c012c57b9d3"