diff --git a/bin/package.json b/bin/package.json
index e99a7a62d48..0dcb29204b0 100644
--- a/bin/package.json
+++ b/bin/package.json
@@ -10,7 +10,7 @@
     "axios": "^1.7.9",
     "ep_etherpad-lite": "workspace:../src",
     "log4js": "^6.9.1",
-    "semver": "^7.6.3",
+    "semver": "^7.7.1",
     "tsx": "^4.19.2",
     "ueberdb2": "^5.0.6"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 3879942e302..ad32a93df6f 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -113,8 +113,8 @@ importers:
         specifier: ^6.9.1
         version: 6.9.1
       semver:
-        specifier: ^7.6.3
-        version: 7.6.3
+        specifier: ^7.7.1
+        version: 7.7.1
       tsx:
         specifier: ^4.19.2
         version: 4.19.2
@@ -246,8 +246,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0
       semver:
-        specifier: ^7.6.3
-        version: 7.6.3
+        specifier: ^7.7.1
+        version: 7.7.1
       socket.io:
         specifier: ^4.8.1
         version: 4.8.1
@@ -4587,8 +4587,8 @@ packages:
     resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
     hasBin: true
 
-  semver@7.6.3:
-    resolution: {integrity: sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==}
+  semver@7.7.1:
+    resolution: {integrity: sha512-hlq8tAfn0m/61p4BVRcPzIGr6LKiMwo4VM6dGi6pt4qcRkmNzTcWq6eCEjEh+qXjkMDvPlOFFSGwQjoEa6gyMA==}
     engines: {node: '>=10'}
     hasBin: true
 
@@ -6850,7 +6850,7 @@ snapshots:
       globby: 11.1.0
       is-glob: 4.0.3
       minimatch: 9.0.5
-      semver: 7.6.3
+      semver: 7.7.1
       ts-api-utils: 1.3.0(typescript@5.7.2)
     optionalDependencies:
       typescript: 5.7.2
@@ -6865,7 +6865,7 @@ snapshots:
       fast-glob: 3.3.2
       is-glob: 4.0.3
       minimatch: 9.0.5
-      semver: 7.6.3
+      semver: 7.7.1
       ts-api-utils: 1.3.0(typescript@5.7.2)
       typescript: 5.7.2
     transitivePeerDependencies:
@@ -7279,7 +7279,7 @@ snapshots:
 
   builtins@5.1.0:
     dependencies:
-      semver: 7.6.3
+      semver: 7.7.1
 
   bytes@3.1.2: {}
 
@@ -7874,7 +7874,7 @@ snapshots:
   eslint-compat-utils@0.5.1(eslint@9.17.0):
     dependencies:
       eslint: 9.17.0
-      semver: 7.6.3
+      semver: 7.7.1
 
   eslint-config-etherpad@4.0.4(eslint@9.17.0)(typescript@5.7.2):
     dependencies:
@@ -7998,7 +7998,7 @@ snapshots:
       is-core-module: 2.15.0
       minimatch: 3.1.2
       resolve: 1.22.10
-      semver: 7.6.3
+      semver: 7.7.1
 
   eslint-plugin-prefer-arrow@1.2.3(eslint@9.17.0):
     dependencies:
@@ -8882,7 +8882,7 @@ snapshots:
       lodash.isstring: 4.0.1
       lodash.once: 4.1.1
       ms: 2.1.3
-      semver: 7.6.3
+      semver: 7.7.1
 
   just-extend@6.2.0: {}
 
@@ -8967,7 +8967,7 @@ snapshots:
       lockfile: 1.0.4
       node-fetch-commonjs: 3.3.2
       proxy-agent: 6.4.0
-      semver: 7.6.3
+      semver: 7.7.1
       tar: 6.2.1
       url-join: 4.0.1
     transitivePeerDependencies:
@@ -9734,7 +9734,7 @@ snapshots:
 
   semver@6.3.1: {}
 
-  semver@7.6.3: {}
+  semver@7.7.1: {}
 
   send@0.19.0:
     dependencies:
@@ -9989,7 +9989,7 @@ snapshots:
       methods: 1.1.2
       mime: 2.6.0
       qs: 6.13.0
-      semver: 7.6.3
+      semver: 7.7.1
     transitivePeerDependencies:
       - supports-color
 
diff --git a/src/package.json b/src/package.json
index 864d6200ce3..e75f7ef484b 100644
--- a/src/package.json
+++ b/src/package.json
@@ -65,7 +65,7 @@
     "resolve": "1.22.10",
     "rusty-store-kv": "^1.3.1",
     "security": "1.0.0",
-    "semver": "^7.6.3",
+    "semver": "^7.7.1",
     "socket.io": "^4.8.1",
     "socket.io-client": "^4.8.1",
     "superagent": "10.1.1",