diff --git a/packages/@uppy/companion/package.json b/packages/@uppy/companion/package.json
index 20bdebf1b6..3ce2247539 100644
--- a/packages/@uppy/companion/package.json
+++ b/packages/@uppy/companion/package.json
@@ -67,7 +67,7 @@
     "serialize-javascript": "^6.0.0",
     "tus-js-client": "^3.1.3",
     "validator": "^13.0.0",
-    "ws": "8.8.1"
+    "ws": "8.17.1"
   },
   "devDependencies": {
     "@types/compression": "1.7.0",
diff --git a/yarn.lock b/yarn.lock
index 8338adb9a4..b2f8553cba 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -9245,7 +9245,7 @@ __metadata:
     tus-js-client: ^3.1.3
     typescript: ~5.1
     validator: ^13.0.0
-    ws: 8.8.1
+    ws: 8.17.1
   bin:
     companion: ./bin/companion
   languageName: unknown
@@ -32277,18 +32277,18 @@ __metadata:
   languageName: node
   linkType: hard
 
-"ws@npm:8.8.1":
-  version: 8.8.1
-  resolution: "ws@npm:8.8.1"
+"ws@npm:8.17.1":
+  version: 8.17.1
+  resolution: "ws@npm:8.17.1"
   peerDependencies:
     bufferutil: ^4.0.1
-    utf-8-validate: ^5.0.2
+    utf-8-validate: ">=5.0.2"
   peerDependenciesMeta:
     bufferutil:
       optional: true
     utf-8-validate:
       optional: true
-  checksum: 2152cf862cae0693f3775bc688a6afb2e989d19d626d215e70f5fcd8eb55b1c3b0d3a6a4052905ec320e2d7734e20aeedbf9744496d62f15a26ad79cf4cf7dae
+  checksum: 442badcce1f1178ec87a0b5372ae2e9771e07c4929a3180321901f226127f252441e8689d765aa5cfba5f50ac60dd830954afc5aeae81609aefa11d3ddf5cecf
   languageName: node
   linkType: hard