diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 99e4192fa..33cf7a9b4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -152,8 +152,8 @@ importers:
         specifier: ^7.0.3
         version: 7.0.3
       ejs:
-        specifier: ^3.1.9
-        version: 3.1.9
+        specifier: ^3.1.10
+        version: 3.1.10
       etherpad-require-kernel:
         specifier: ^1.0.16
         version: 1.0.16
@@ -3589,8 +3589,8 @@ packages:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
     dev: false
 
-  /ejs@3.1.9:
-    resolution: {integrity: sha512-rC+QVNMJWv+MtPgkt0y+0rVEIdbtxVADApW9JXrUVlzHetgcyczP/E7DJmWJ4fJCZF2cPcBk0laWO9ZHMG3DmQ==}
+  /ejs@3.1.10:
+    resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
     engines: {node: '>=0.10.0'}
     hasBin: true
     dependencies:
diff --git a/src/package.json b/src/package.json
index 09f832954..d69948a68 100644
--- a/src/package.json
+++ b/src/package.json
@@ -35,7 +35,7 @@
     "clean-css": "^5.3.3",
     "cookie-parser": "^1.4.6",
     "cross-spawn": "^7.0.3",
-    "ejs": "^3.1.9",
+    "ejs": "^3.1.10",
     "etherpad-require-kernel": "^1.0.16",
     "etherpad-yajsml": "0.0.12",
     "express": "4.19.2",