diff --git a/package-lock.json b/package-lock.json
index 7d553e8fd..11b6ff9f8 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -716,7 +716,9 @@
       }
     },
     "node_modules/@cto.af/wtf8": {
-      "version": "0.0.5",
+      "version": "0.0.6",
+      "resolved": "https://registry.npmjs.org/@cto.af/wtf8/-/wtf8-0.0.6.tgz",
+      "integrity": "sha512-xp/zbWLXuh2WBxi9tIc+Jep7BAwLu8ETTI8xN68ks10bxOBMISs/jcu9DBEkOeGXLaTKUbA0Y2Ficx/jmmPABg==",
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -3307,13 +3309,15 @@
       "license": "CC-BY-4.0"
     },
     "node_modules/cbor2": {
-      "version": "2.3.0",
+      "version": "2.4.0",
+      "resolved": "https://registry.npmjs.org/cbor2/-/cbor2-2.4.0.tgz",
+      "integrity": "sha512-s6+CPoEI6tgwasK2cWMTXt5sy8Yxo4vgRmKgkJSCdKDL/0bHU3aYJoYeHRX7/oywKYA3bxcpqEYkXkrdHe0+0Q==",
       "license": "MIT",
       "dependencies": {
-        "@cto.af/wtf8": "0.0.5"
+        "@cto.af/wtf8": "0.0.6"
       },
       "engines": {
-        "node": ">=20"
+        "node": ">=22"
       }
     },
     "node_modules/ccount": {
@@ -11030,7 +11034,7 @@
       "dependencies": {
         "@xmldom/xmldom": "^0.9.12",
         "bson": "^7.3.0",
-        "cbor2": "^2.3.0",
+        "cbor2": "^2.4.0",
         "eventemitter3": "^5.0.1",
         "fast-png": "^8.0.0",
         "uuid": "^14.0.0",
diff --git a/packages/roslib/package.json b/packages/roslib/package.json
index 9a42d59ea..b5ef0ef30 100644
--- a/packages/roslib/package.json
+++ b/packages/roslib/package.json
@@ -45,7 +45,7 @@
   "dependencies": {
     "@xmldom/xmldom": "^0.9.12",
     "bson": "^7.3.0",
-    "cbor2": "^2.3.0",
+    "cbor2": "^2.4.0",
     "eventemitter3": "^5.0.1",
     "fast-png": "^8.0.0",
     "uuid": "^14.0.0",