diff --git a/bin/package.json b/bin/package.json
index 50be1055a01..f73132262f1 100644
--- a/bin/package.json
+++ b/bin/package.json
@@ -10,7 +10,7 @@
     "axios": "^1.12.1",
     "ep_etherpad-lite": "workspace:../src",
     "log4js": "^6.9.1",
-    "semver": "^7.7.2",
+    "semver": "^7.7.3",
     "tsx": "^4.20.6",
     "ueberdb2": "^5.0.22"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index c09f1e25bb2..efc76dbe579 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -116,8 +116,8 @@ importers:
         specifier: ^6.9.1
         version: 6.9.1
       semver:
-        specifier: ^7.7.2
-        version: 7.7.2
+        specifier: ^7.7.3
+        version: 7.7.3
       tsx:
         specifier: ^4.20.6
         version: 4.20.6
@@ -252,8 +252,8 @@ importers:
         specifier: 1.0.0
         version: 1.0.0
       semver:
-        specifier: ^7.7.2
-        version: 7.7.2
+        specifier: ^7.7.3
+        version: 7.7.3
       socket.io:
         specifier: ^4.8.1
         version: 4.8.1
@@ -4222,11 +4222,6 @@ packages:
     resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
     hasBin: true
 
-  semver@7.7.2:
-    resolution: {integrity: sha512-RF0Fw+rO5AMf9MAyaRXI4AV0Ulj5lMHqVxxdSgiVbixSCXoEmmX/jk0CuJw4+3SqroYO9VoUh+HcuJivvtJemA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
   semver@7.7.3:
     resolution: {integrity: sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==}
     engines: {node: '>=10'}
@@ -6156,7 +6151,7 @@ snapshots:
       globby: 11.1.0
       is-glob: 4.0.3
       minimatch: 9.0.5
-      semver: 7.7.2
+      semver: 7.7.3
       ts-api-utils: 1.4.3(typescript@5.9.3)
     optionalDependencies:
       typescript: 5.9.3
@@ -6623,7 +6618,7 @@ snapshots:
 
   builtins@5.1.0:
     dependencies:
-      semver: 7.7.2
+      semver: 7.7.3
 
   bytes@3.1.2: {}
 
@@ -7089,7 +7084,7 @@ snapshots:
   eslint-compat-utils@0.5.1(eslint@9.37.0):
     dependencies:
       eslint: 9.37.0
-      semver: 7.7.2
+      semver: 7.7.3
 
   eslint-config-etherpad@4.0.4(eslint@9.37.0)(typescript@5.9.3):
     dependencies:
@@ -7213,7 +7208,7 @@ snapshots:
       is-core-module: 2.16.1
       minimatch: 3.1.2
       resolve: 1.22.10
-      semver: 7.7.2
+      semver: 7.7.3
 
   eslint-plugin-prefer-arrow@1.2.3(eslint@9.37.0):
     dependencies:
@@ -7843,7 +7838,7 @@ snapshots:
 
   is-bun-module@2.0.0:
     dependencies:
-      semver: 7.7.2
+      semver: 7.7.3
 
   is-callable@1.2.7: {}
 
@@ -8053,7 +8048,7 @@ snapshots:
       lodash.isstring: 4.0.1
       lodash.once: 4.1.1
       ms: 2.1.3
-      semver: 7.7.2
+      semver: 7.7.3
 
   jwa@1.4.1:
     dependencies:
@@ -8173,7 +8168,7 @@ snapshots:
       lockfile: 1.0.4
       node-fetch-commonjs: 3.3.2
       proxy-agent: 6.5.0
-      semver: 7.7.2
+      semver: 7.7.3
       tar: 6.2.1
       url-join: 4.0.1
     transitivePeerDependencies:
@@ -8970,8 +8965,6 @@ snapshots:
 
   semver@6.3.1: {}
 
-  semver@7.7.2: {}
-
   semver@7.7.3: {}
 
   send@1.2.0:
diff --git a/src/package.json b/src/package.json
index 5a51f95b0ab..95768bdfa62 100644
--- a/src/package.json
+++ b/src/package.json
@@ -66,7 +66,7 @@
     "resolve": "1.22.10",
     "rusty-store-kv": "^1.3.1",
     "security": "1.0.0",
-    "semver": "^7.7.2",
+    "semver": "^7.7.3",
     "socket.io": "^4.8.1",
     "socket.io-client": "^4.8.1",
     "superagent": "10.2.3",