diff --git a/blocksuite/affine/widgets/linked-doc/package.json b/blocksuite/affine/widgets/linked-doc/package.json
index 3bf4ac6911..d76c16dfe5 100644
--- a/blocksuite/affine/widgets/linked-doc/package.json
+++ b/blocksuite/affine/widgets/linked-doc/package.json
@@ -24,7 +24,7 @@
     "@toeverything/theme": "^1.1.23",
     "@types/lodash-es": "^4.17.12",
     "fflate": "^0.8.2",
-    "js-yaml": "^4.2.0",
+    "js-yaml": "^5.0.0",
     "jszip": "^3.10.1",
     "lit": "^3.2.0",
     "lodash-es": "^4.17.23",
diff --git a/package.json b/package.json
index 4366d8e1d3..570e5c7206 100644
--- a/package.json
+++ b/package.json
@@ -169,8 +169,8 @@
     "fs-xattr": "npm:@napi-rs/xattr@latest",
     "@opentelemetry/core": "^2.10.0",
     "ioredis": "^5.11.1",
-    "js-yaml@npm:^4.1.0": "^4.2.0",
-    "js-yaml@npm:4.1.1": "^4.2.0",
+    "js-yaml@npm:^4.1.0": "^5.0.0",
+    "js-yaml@npm:4.1.1": "^5.0.0",
     "multer": "^2.2.0",
     "protobufjs": "^7.6.4",
     "tar": "^7.5.21",
diff --git a/yarn.lock b/yarn.lock
index d8b70666e2..e05b333ef7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3071,7 +3071,7 @@ __metadata:
     "@types/js-yaml": "npm:^4.0.9"
     "@types/lodash-es": "npm:^4.17.12"
     fflate: "npm:^0.8.2"
-    js-yaml: "npm:^4.2.0"
+    js-yaml: "npm:^5.0.0"
     jszip: "npm:^3.10.1"
     lit: "npm:^3.2.0"
     lodash-es: "npm:^4.17.23"
@@ -26504,14 +26504,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"js-yaml@npm:^4.2.0":
-  version: 4.3.0
-  resolution: "js-yaml@npm:4.3.0"
+"js-yaml@npm:^5.0.0":
+  version: 5.2.2
+  resolution: "js-yaml@npm:5.2.2"
   dependencies:
     argparse: "npm:^2.0.1"
   bin:
-    js-yaml: bin/js-yaml.js
-  checksum: 10/2bcec3a8118d7f744badeb04e14366578d234a736f353d41fe35d2305e4ce2409a8e041d277f07cd6bbc8aaa12128d650a68ce43247072519bede20962d2126f
+    js-yaml: bin/js-yaml.mjs
+  checksum: 10/2b4c2933af12c97e1c4894a4f27fe9b06dab70a64a96bb50624b4429bef6bf11008bde20d868bce52a36784473314efc30078ba6025b58cf7537961e23b1ae9c
   languageName: node
   linkType: hard