diff --git a/app/assets/javascripts/bootstrap-json/package.json b/app/assets/javascripts/bootstrap-json/package.json
index 712ad39067a..c08699b7e66 100644
--- a/app/assets/javascripts/bootstrap-json/package.json
+++ b/app/assets/javascripts/bootstrap-json/package.json
@@ -20,7 +20,7 @@
     "clean-base-url": "^1.0.0",
     "express": "^4.18.3",
     "glob": "^10.3.10",
-    "html-entities": "^2.4.0",
+    "html-entities": "^2.5.2",
     "html-rewriter-wasm": "^0.4.1",
     "node-fetch": "^3.3.2"
   },
diff --git a/app/assets/javascripts/discourse/package.json b/app/assets/javascripts/discourse/package.json
index a97198c3e16..298c5e3ed62 100644
--- a/app/assets/javascripts/discourse/package.json
+++ b/app/assets/javascripts/discourse/package.json
@@ -94,7 +94,7 @@
     "ember-template-imports": "^4.1.0",
     "ember-test-selectors": "^6.0.0",
     "float-kit": "1.0.0",
-    "html-entities": "^2.4.0",
+    "html-entities": "^2.5.2",
     "imports-loader": "^5.0.0",
     "jquery": "^3.7.1",
     "js-yaml": "^4.1.0",
diff --git a/yarn.lock b/yarn.lock
index 4b9840bbad4..94a6d289e8f 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7902,10 +7902,10 @@ html-encoding-sniffer@^2.0.1:
   dependencies:
     whatwg-encoding "^1.0.5"
 
-html-entities@^2.4.0:
-  version "2.4.0"
-  resolved "https://registry.yarnpkg.com/html-entities/-/html-entities-2.4.0.tgz#edd0cee70402584c8c76cc2c0556db09d1f45061"
-  integrity sha512-igBTJcNNNhvZFRtm8uA6xMY6xYleeDwn3PeBCkDz7tHttv4F2hsDI2aPgNERWzvRcNYHNT3ymRaQzllmXj4YsQ==
+html-entities@^2.5.2:
+  version "2.5.2"
+  resolved "https://registry.yarnpkg.com/html-entities/-/html-entities-2.5.2.tgz#201a3cf95d3a15be7099521620d19dfb4f65359f"
+  integrity sha512-K//PSRMQk4FZ78Kyau+mZurHn3FH0Vwr+H36eE0rPbeYkRRi9YxceYPhuN60UwWorxyKHhqoAJl2OFKa4BVtaA==
 
 html-rewriter-wasm@^0.4.1:
   version "0.4.1"