diff --git a/plugins/scaffolder-backend/package.json b/plugins/scaffolder-backend/package.json
index b9ab65349f..965539e1fc 100644
--- a/plugins/scaffolder-backend/package.json
+++ b/plugins/scaffolder-backend/package.json
@@ -74,7 +74,7 @@
     "uuid": "^8.2.0",
     "winston": "^3.2.1",
     "yaml": "^2.0.0",
-    "vm2": "^3.9.6",
+    "vm2": "^3.9.11",
     "zen-observable": "^0.8.15",
     "zod": "^3.11.6"
   },
diff --git a/yarn.lock b/yarn.lock
index 8b5fab4051..962e89a7c0 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -26292,7 +26292,7 @@ vm-browserify@^1.0.1:
   resolved "https://registry.npmjs.org/vm-browserify/-/vm-browserify-1.1.2.tgz#78641c488b8e6ca91a75f511e7a3b32a86e5dda0"
   integrity sha512-2ham8XPWTONajOR0ohOKOHXkm3+gaBmGut3SRuu75xLd/RRaY6vqgh8NBYYk7+RW3u5AtzPQZG8F10LHkl0lAQ==
 
-vm2@^3.9.6:
+vm2@^3.9.11:
   version "3.9.11"
   resolved "https://registry.npmjs.org/vm2/-/vm2-3.9.11.tgz#a880f510a606481719ec3f9803b940c5805a06fe"
   integrity sha512-PFG8iJRSjvvBdisowQ7iVF580DXb1uCIiGaXgm7tynMR1uTBlv7UJlB1zdv5KJ+Tmq1f0Upnj3fayoEOPpCBKg==