diff --git a/.changeset/tough-dancers-suffer.md b/.changeset/tough-dancers-suffer.md
new file mode 100644
index 0000000000..fd439668db
--- /dev/null
+++ b/.changeset/tough-dancers-suffer.md
@@ -0,0 +1,23 @@
+---
+'@backstage/plugin-scaffolder-backend-module-gitlab': patch
+'@backstage/frontend-plugin-api': patch
+'@backstage/plugin-permission-backend': patch
+'@backstage/plugin-scaffolder-backend': patch
+'@backstage/plugin-permission-common': patch
+'@backstage/core-components': patch
+'@backstage/plugin-playlist-backend': patch
+'@backstage/plugin-scaffolder-react': patch
+'@backstage/plugin-catalog-backend': patch
+'@backstage/plugin-permission-node': patch
+'@backstage/plugin-scaffolder-node': patch
+'@backstage/backend-tasks': patch
+'@backstage/plugin-search-backend': patch
+'@backstage/core-app-api': patch
+'@backstage/plugin-scaffolder': patch
+'@backstage/cli-node': patch
+'@backstage/plugin-auth-node': patch
+'@backstage/cli': patch
+'@backstage/plugin-home': patch
+---
+
+Fixing regular expression ReDoS with zod packages. Upgrading to latest. ref: https://security.snyk.io/vuln/SNYK-JS-ZOD-5925617
diff --git a/packages/backend-tasks/package.json b/packages/backend-tasks/package.json
index c6d84db132..e0632e679e 100644
--- a/packages/backend-tasks/package.json
+++ b/packages/backend-tasks/package.json
@@ -44,7 +44,7 @@
     "luxon": "^3.0.0",
     "uuid": "^8.0.0",
     "winston": "^3.2.1",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/packages/cli-node/package.json b/packages/cli-node/package.json
index 36368fd4a9..34b8d6c97d 100644
--- a/packages/cli-node/package.json
+++ b/packages/cli-node/package.json
@@ -35,7 +35,7 @@
     "@yarnpkg/parsers": "^3.0.0-rc.4",
     "fs-extra": "10.1.0",
     "semver": "^7.5.3",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/cli": "workspace:^",
diff --git a/packages/cli/package.json b/packages/cli/package.json
index db457689b0..65a675a385 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -138,7 +138,7 @@
     "yaml": "^2.0.0",
     "yml-loader": "^2.1.0",
     "yn": "^4.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-common": "workspace:^",
diff --git a/packages/core-app-api/package.json b/packages/core-app-api/package.json
index b18f31eb4f..691f19f46c 100644
--- a/packages/core-app-api/package.json
+++ b/packages/core-app-api/package.json
@@ -54,7 +54,7 @@
     "prop-types": "^15.7.2",
     "react-use": "^17.2.4",
     "zen-observable": "^0.10.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "peerDependencies": {
     "react": "^16.13.1 || ^17.0.0 || ^18.0.0",
diff --git a/packages/core-components/package.json b/packages/core-components/package.json
index 00303a4278..d994bf6d3b 100644
--- a/packages/core-components/package.json
+++ b/packages/core-components/package.json
@@ -86,7 +86,7 @@
     "react-window": "^1.8.6",
     "remark-gfm": "^3.0.1",
     "zen-observable": "^0.10.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "peerDependencies": {
     "react": "^16.13.1 || ^17.0.0 || ^18.0.0",
diff --git a/packages/frontend-plugin-api/package.json b/packages/frontend-plugin-api/package.json
index ce294a4d13..1a04cd19d4 100644
--- a/packages/frontend-plugin-api/package.json
+++ b/packages/frontend-plugin-api/package.json
@@ -47,7 +47,7 @@
     "@material-ui/core": "^4.12.4",
     "@types/react": "^16.13.1 || ^17.0.0",
     "lodash": "^4.17.21",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.21.4"
   }
 }
diff --git a/plugins/auth-node/package.json b/plugins/auth-node/package.json
index e53a58bab8..79b113c8c8 100644
--- a/plugins/auth-node/package.json
+++ b/plugins/auth-node/package.json
@@ -43,7 +43,7 @@
     "node-fetch": "^2.6.7",
     "passport": "^0.7.0",
     "winston": "^3.2.1",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.21.4"
   },
   "devDependencies": {
diff --git a/plugins/catalog-backend/package.json b/plugins/catalog-backend/package.json
index 8ac46ce975..573e135838 100644
--- a/plugins/catalog-backend/package.json
+++ b/plugins/catalog-backend/package.json
@@ -82,7 +82,7 @@
     "winston": "^3.2.1",
     "yaml": "^2.0.0",
     "yn": "^4.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/plugins/home/package.json b/plugins/home/package.json
index ad4b339494..92f7d0977f 100644
--- a/plugins/home/package.json
+++ b/plugins/home/package.json
@@ -72,7 +72,7 @@
     "react-grid-layout": "1.3.4",
     "react-resizable": "^3.0.4",
     "react-use": "^17.2.4",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "peerDependencies": {
     "react": "^16.13.1 || ^17.0.0 || ^18.0.0",
diff --git a/plugins/permission-backend/package.json b/plugins/permission-backend/package.json
index e41f2bfe56..2d17b79e24 100644
--- a/plugins/permission-backend/package.json
+++ b/plugins/permission-backend/package.json
@@ -56,7 +56,7 @@
     "node-fetch": "^2.6.7",
     "winston": "^3.2.1",
     "yn": "^4.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/cli": "workspace:^",
diff --git a/plugins/permission-common/package.json b/plugins/permission-common/package.json
index 0cc2d043df..b28fc01d22 100644
--- a/plugins/permission-common/package.json
+++ b/plugins/permission-common/package.json
@@ -47,7 +47,7 @@
     "@backstage/types": "workspace:^",
     "cross-fetch": "^4.0.0",
     "uuid": "^8.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/cli": "workspace:^",
diff --git a/plugins/permission-node/package.json b/plugins/permission-node/package.json
index 51f3642a7a..6ef30fa419 100644
--- a/plugins/permission-node/package.json
+++ b/plugins/permission-node/package.json
@@ -55,7 +55,7 @@
     "@types/express": "^4.17.6",
     "express": "^4.17.1",
     "express-promise-router": "^4.1.0",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.20.4"
   },
   "devDependencies": {
diff --git a/plugins/playlist-backend/package.json b/plugins/playlist-backend/package.json
index 14c704d1c7..815c8b55f2 100644
--- a/plugins/playlist-backend/package.json
+++ b/plugins/playlist-backend/package.json
@@ -46,7 +46,7 @@
     "uuid": "^8.2.0",
     "winston": "^3.2.1",
     "yn": "^4.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/plugins/scaffolder-backend-module-gitlab/package.json b/plugins/scaffolder-backend-module-gitlab/package.json
index 045872573c..6efb4d0799 100644
--- a/plugins/scaffolder-backend-module-gitlab/package.json
+++ b/plugins/scaffolder-backend-module-gitlab/package.json
@@ -39,7 +39,7 @@
     "@gitbeaker/core": "^35.8.0",
     "@gitbeaker/node": "^35.8.0",
     "yaml": "^2.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/plugins/scaffolder-backend/package.json b/plugins/scaffolder-backend/package.json
index 6f4f889867..db454041fb 100644
--- a/plugins/scaffolder-backend/package.json
+++ b/plugins/scaffolder-backend/package.json
@@ -87,7 +87,7 @@
     "winston": "^3.2.1",
     "yaml": "^2.0.0",
     "zen-observable": "^0.10.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/plugins/scaffolder-node/package.json b/plugins/scaffolder-node/package.json
index 08ccb510b9..d383bac779 100644
--- a/plugins/scaffolder-node/package.json
+++ b/plugins/scaffolder-node/package.json
@@ -54,7 +54,7 @@
     "jsonschema": "^1.2.6",
     "p-limit": "^3.1.0",
     "winston": "^3.2.1",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.20.4"
   },
   "devDependencies": {
diff --git a/plugins/scaffolder-react/package.json b/plugins/scaffolder-react/package.json
index 585a741fdb..b832197fce 100644
--- a/plugins/scaffolder-react/package.json
+++ b/plugins/scaffolder-react/package.json
@@ -77,7 +77,7 @@
     "react-use": "^17.2.4",
     "use-immer": "^0.9.0",
     "zen-observable": "^0.10.0",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.20.4"
   },
   "peerDependencies": {
diff --git a/plugins/scaffolder/package.json b/plugins/scaffolder/package.json
index 697bce4668..311647e38f 100644
--- a/plugins/scaffolder/package.json
+++ b/plugins/scaffolder/package.json
@@ -88,7 +88,7 @@
     "react-use": "^17.2.4",
     "yaml": "^2.0.0",
     "zen-observable": "^0.10.0",
-    "zod": "^3.21.4",
+    "zod": "^3.22.4",
     "zod-to-json-schema": "^3.20.4"
   },
   "peerDependencies": {
diff --git a/plugins/search-backend/package.json b/plugins/search-backend/package.json
index 2891897a00..0b79e16074 100644
--- a/plugins/search-backend/package.json
+++ b/plugins/search-backend/package.json
@@ -61,7 +61,7 @@
     "qs": "^6.10.1",
     "winston": "^3.2.1",
     "yn": "^4.0.0",
-    "zod": "^3.21.4"
+    "zod": "^3.22.4"
   },
   "devDependencies": {
     "@backstage/backend-test-utils": "workspace:^",
diff --git a/yarn.lock b/yarn.lock
index ad150e9504..831a58a985 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3457,7 +3457,7 @@ __metadata:
     uuid: ^8.0.0
     wait-for-expect: ^3.0.2
     winston: ^3.2.1
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -3551,7 +3551,7 @@ __metadata:
     fs-extra: 10.1.0
     mock-fs: ^5.2.0
     semver: ^7.5.3
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -3697,7 +3697,7 @@ __metadata:
     yaml: ^2.0.0
     yml-loader: ^2.1.0
     yn: ^4.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   peerDependencies:
     "@vitejs/plugin-react": ^4.0.4
     vite: ^4.4.9
@@ -3805,7 +3805,7 @@ __metadata:
     react-router-stable: "npm:react-router@^6.3.0"
     react-use: ^17.2.4
     zen-observable: ^0.10.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
     react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -4004,7 +4004,7 @@ __metadata:
     react-window: ^1.8.6
     remark-gfm: ^3.0.1
     zen-observable: ^0.10.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
     react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -4215,7 +4215,7 @@ __metadata:
     "@types/react": ^16.13.1 || ^17.0.0
     history: ^5.3.0
     lodash: ^4.17.21
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.21.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -5041,7 +5041,7 @@ __metadata:
     supertest: ^6.1.3
     uuid: ^8.0.0
     winston: ^3.2.1
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.21.4
   languageName: unknown
   linkType: soft
@@ -5809,7 +5809,7 @@ __metadata:
     winston: ^3.2.1
     yaml: ^2.0.0
     yn: ^4.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -7381,7 +7381,7 @@ __metadata:
     react-grid-layout: 1.3.4
     react-resizable: ^3.0.4
     react-use: ^17.2.4
-    zod: ^3.21.4
+    zod: ^3.22.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
     react-dom: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -8303,7 +8303,7 @@ __metadata:
     supertest: ^6.1.6
     winston: ^3.2.1
     yn: ^4.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -8318,7 +8318,7 @@ __metadata:
     cross-fetch: ^4.0.0
     msw: ^1.0.0
     uuid: ^8.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -8340,7 +8340,7 @@ __metadata:
     express-promise-router: ^4.1.0
     msw: ^1.0.0
     supertest: ^6.1.3
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.20.4
   languageName: unknown
   linkType: soft
@@ -8413,7 +8413,7 @@ __metadata:
     uuid: ^8.2.0
     winston: ^3.2.1
     yn: ^4.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -8717,7 +8717,7 @@ __metadata:
     "@gitbeaker/core": ^35.8.0
     "@gitbeaker/node": ^35.8.0
     yaml: ^2.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -8826,7 +8826,7 @@ __metadata:
     winston: ^3.2.1
     yaml: ^2.0.0
     zen-observable: ^0.10.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -8860,7 +8860,7 @@ __metadata:
     jsonschema: ^1.2.6
     p-limit: ^3.1.0
     winston: ^3.2.1
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.20.4
   languageName: unknown
   linkType: soft
@@ -8911,7 +8911,7 @@ __metadata:
     react-use: ^17.2.4
     use-immer: ^0.9.0
     zen-observable: ^0.10.0
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.20.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -8978,7 +8978,7 @@ __metadata:
     react-use: ^17.2.4
     yaml: ^2.0.0
     zen-observable: ^0.10.0
-    zod: ^3.21.4
+    zod: ^3.22.4
     zod-to-json-schema: ^3.20.4
   peerDependencies:
     react: ^16.13.1 || ^17.0.0 || ^18.0.0
@@ -9163,7 +9163,7 @@ __metadata:
     supertest: ^6.1.3
     winston: ^3.2.1
     yn: ^4.0.0
-    zod: ^3.21.4
+    zod: ^3.22.4
   languageName: unknown
   linkType: soft
 
@@ -45412,7 +45412,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"zod@npm:^3.21.4":
+"zod@npm:^3.21.4, zod@npm:^3.22.4":
   version: 3.22.4
   resolution: "zod@npm:3.22.4"
   checksum: 80bfd7f8039b24fddeb0718a2ec7c02aa9856e4838d6aa4864335a047b6b37a3273b191ef335bf0b2002e5c514ef261ffcda5a589fb084a48c336ffc4cdbab7f