diff --git a/package-lock.json b/package-lock.json
index 03b8438c5a..53f8a2eec7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "@parse/push-adapter": "5.1.1",
         "bcryptjs": "2.4.3",
         "body-parser": "1.20.3",
-        "commander": "10.0.1",
+        "commander": "^12.1.0",
         "cors": "2.8.5",
         "deepcopy": "2.1.0",
         "express": "4.21.1",
@@ -42,7 +42,7 @@
         "parse": "4.2.0",
         "path-to-regexp": "6.2.2",
         "pg-monitor": "2.0.0",
-        "pg-promise": "^11.9.1",
+        "pg-promise": "11.9.1",
         "pluralize": "8.0.0",
         "rate-limit-redis": "3.0.2",
         "redis": "4.6.13",
@@ -5545,11 +5545,12 @@
       }
     },
     "node_modules/commander": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-10.0.1.tgz",
-      "integrity": "sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug==",
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
+      "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==",
+      "license": "MIT",
       "engines": {
-        "node": ">=14"
+        "node": ">=18"
       }
     },
     "node_modules/commondir": {
@@ -25868,9 +25869,9 @@
       }
     },
     "commander": {
-      "version": "10.0.1",
-      "resolved": "https://registry.npmjs.org/commander/-/commander-10.0.1.tgz",
-      "integrity": "sha512-y4Mg2tXshplEbSGzx7amzPwKKOCGuoSRP/CjEdwwk0FOGlUbq6lKuoyDZTNZkmxHdJtp54hdfY/JUrdL7Xfdug=="
+      "version": "12.1.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-12.1.0.tgz",
+      "integrity": "sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA=="
     },
     "commondir": {
       "version": "1.0.1",
diff --git a/package.json b/package.json
index 864560d53b..89f3465498 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,7 @@
     "@parse/push-adapter": "5.1.1",
     "bcryptjs": "2.4.3",
     "body-parser": "1.20.3",
-    "commander": "10.0.1",
+    "commander": "12.1.0",
     "cors": "2.8.5",
     "deepcopy": "2.1.0",
     "express": "4.21.1",