diff --git a/packages/fxa-auth-server/package.json b/packages/fxa-auth-server/package.json
index 018399a1f09..5cd7ffd3e95 100644
--- a/packages/fxa-auth-server/package.json
+++ b/packages/fxa-auth-server/package.json
@@ -176,7 +176,7 @@
     "typescript": "5.5.3",
     "webpack": "^5.104.1",
     "webpack-watch-files-plugin": "^1.2.1",
-    "ws": "^8.17.1"
+    "ws": "^8.21.0"
   },
   "nx": {
     "tags": [
diff --git a/yarn.lock b/yarn.lock
index 7905844a32c..255c5262019 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -31090,7 +31090,7 @@ __metadata:
     web-push: "npm:3.4.4"
     webpack: "npm:^5.104.1"
     webpack-watch-files-plugin: "npm:^1.2.1"
-    ws: "npm:^8.17.1"
+    ws: "npm:^8.21.0"
   bin:
     fxa-auth: ./bin/key_server.js
   languageName: unknown
@@ -54811,6 +54811,21 @@ __metadata:
   languageName: node
   linkType: hard
 
+"ws@npm:^8.21.0":
+  version: 8.21.0
+  resolution: "ws@npm:8.21.0"
+  peerDependencies:
+    bufferutil: ^4.0.1
+    utf-8-validate: ">=5.0.2"
+  peerDependenciesMeta:
+    bufferutil:
+      optional: true
+    utf-8-validate:
+      optional: true
+  checksum: 10c0/ef4a243476283fc49bc7550966c4af4aa0eef56273837211e700de3b664e08604a760cdddcb5ba43c049140e74ccfec5b0ee0bb439e08c2adf9138902fdde5f9
+  languageName: node
+  linkType: hard
+
 "xml-name-validator@npm:^3.0.0":
   version: 3.0.0
   resolution: "xml-name-validator@npm:3.0.0"