diff --git a/server/package.json b/server/package.json
index 6083fa8..ea09da6 100644
--- a/server/package.json
+++ b/server/package.json
@@ -33,7 +33,7 @@
     "pgkeen": "^1.4.0",
     "postgres-migrations": "^4.0.3",
     "sharp": "^0.25.4",
-    "ws": "^7.2.3",
+    "ws": "^7.4.6",
     "y-protocols": "1.0.1",
     "y-websocket": "1.3.3",
     "yjs": "13.3.2"
diff --git a/server/yarn.lock b/server/yarn.lock
index c410fe9..df6ba22 100644
--- a/server/yarn.lock
+++ b/server/yarn.lock
@@ -5125,10 +5125,10 @@ ws@^6.2.1:
   dependencies:
     async-limiter "~1.0.0"
 
-ws@^7.2.3:
-  version "7.2.3"
-  resolved "https://registry.yarnpkg.com/ws/-/ws-7.2.3.tgz#a5411e1fb04d5ed0efee76d26d5c46d830c39b46"
-  integrity sha512-HTDl9G9hbkNDk98naoR/cHDws7+EyYMOdL1BmjsZXRUjf7d+MficC4B7HLUPlSiho0vg+CWKrGIt/VJBd1xunQ==
+ws@^7.2.3, ws@^7.4.6:
+  version "7.4.6"
+  resolved "https://registry.yarnpkg.com/ws/-/ws-7.4.6.tgz#5654ca8ecdeee47c33a9a4bf6d28e2be2980377c"
+  integrity sha512-YmhHDO4MzaDLB+M9ym/mDA5z0naX8j7SIlT8f8z+I0VtzsRbekxEutHSme7NPS2qE8StCYQNUnfWdXta/Yu85A==
 
 xml-name-validator@^3.0.0:
   version "3.0.0"