diff --git a/packages/permission-common/package.json b/packages/permission-common/package.json
index 376f969b19..e801c27344 100644
--- a/packages/permission-common/package.json
+++ b/packages/permission-common/package.json
@@ -37,7 +37,8 @@
   "dependencies": {
     "@backstage/errors": "^0.1.2",
     "cross-fetch": "^3.0.6",
-    "uuid": "^8.0.0"
+    "uuid": "^8.0.0",
+    "zod": "^3.11.6"
   },
   "devDependencies": {
     "@backstage/cli": "^0.8.0",
diff --git a/yarn.lock b/yarn.lock
index e18f6fedb2..f96df9c008 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -29479,7 +29479,7 @@ zip-stream@^4.1.0:
     compress-commons "^4.1.0"
     readable-stream "^3.6.0"
 
-zod@^3.9.5:
+zod@^3.11.6, zod@^3.9.5:
   version "3.11.6"
   resolved "https://registry.npmjs.org/zod/-/zod-3.11.6.tgz#e43a5e0c213ae2e02aefe7cb2b1a6fa3d7f1f483"
   integrity sha512-daZ80A81I3/9lIydI44motWe6n59kRBfNzTuS2bfzVh1nAXi667TOTWWtatxyG+fwgNUiagSj/CWZwRRbevJIg==