diff --git a/package.json b/package.json
index 82030427e..5711eb724 100644
--- a/package.json
+++ b/package.json
@@ -76,7 +76,7 @@
     "flow-parser": "0.306.0",
     "get-east-asian-width": "1.4.0",
     "get-stdin": "9.0.0",
-    "graphql": "16.13.1",
+    "graphql": "16.13.2",
     "hermes-parser": "0.34.0",
     "html-element-attributes": "3.5.0",
     "html-ua-styles": "0.3.1",
diff --git a/website/package.json b/website/package.json
index fffeb7b81..0980a3f3f 100644
--- a/website/package.json
+++ b/website/package.json
@@ -32,7 +32,7 @@
     "clsx": "2.1.1",
     "cm6-graphql": "0.2.1",
     "github-buttons": "2.31.1",
-    "graphql": "16.13.1",
+    "graphql": "16.13.2",
     "lz-string": "1.5.0",
     "prism-react-renderer": "2.4.1",
     "react": "19.2.4",
diff --git a/website/yarn.lock b/website/yarn.lock
index 1cca2f786..830f96716 100644
--- a/website/yarn.lock
+++ b/website/yarn.lock
@@ -8202,10 +8202,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"graphql@npm:16.13.1":
-  version: 16.13.1
-  resolution: "graphql@npm:16.13.1"
-  checksum: 10/a42f857f60351e1f4665aa5bc5524796d3f45bf81793e6db932f902aff769b0488dafaa1d9c07bddda7122a1f6d0b0105fab12d38992f6b6fb81fc3d7ced1afc
+"graphql@npm:16.13.2":
+  version: 16.13.2
+  resolution: "graphql@npm:16.13.2"
+  checksum: 10/9ede86f0a7227d47a41e2076e0132839f66fbd14899abfd818d7de2ab81076ee249c8788ad42243367d68a027a8763cc4c7be2e441ccfb03a8549490c7b66c2f
   languageName: node
   linkType: hard
 
@@ -12970,7 +12970,7 @@ __metadata:
     cm6-graphql: "npm:0.2.1"
     concurrently: "npm:9.2.1"
     github-buttons: "npm:2.31.1"
-    graphql: "npm:16.13.1"
+    graphql: "npm:16.13.2"
     lz-string: "npm:1.5.0"
     package-dependencies-tree: "npm:0.0.1"
     prism-react-renderer: "npm:2.4.1"
diff --git a/yarn.lock b/yarn.lock
index e59c46efc..09d1bab8a 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5568,10 +5568,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"graphql@npm:16.13.1":
-  version: 16.13.1
-  resolution: "graphql@npm:16.13.1"
-  checksum: 10/a42f857f60351e1f4665aa5bc5524796d3f45bf81793e6db932f902aff769b0488dafaa1d9c07bddda7122a1f6d0b0105fab12d38992f6b6fb81fc3d7ced1afc
+"graphql@npm:16.13.2":
+  version: 16.13.2
+  resolution: "graphql@npm:16.13.2"
+  checksum: 10/9ede86f0a7227d47a41e2076e0132839f66fbd14899abfd818d7de2ab81076ee249c8788ad42243367d68a027a8763cc4c7be2e441ccfb03a8549490c7b66c2f
   languageName: node
   linkType: hard
 
@@ -8670,7 +8670,7 @@ __metadata:
     get-stdin: "npm:9.0.0"
     gfm-test-suite: "npm:0.0.2"
     globals: "npm:17.4.0"
-    graphql: "npm:16.13.1"
+    graphql: "npm:16.13.2"
     hermes-parser: "npm:0.34.0"
     html-element-attributes: "npm:3.5.0"
     html-ua-styles: "npm:0.3.1"