diff --git a/package.json b/package.json
index 0102e3c9a..699cd67b6 100644
--- a/package.json
+++ b/package.json
@@ -76,7 +76,7 @@
     "flow-parser": "0.301.0",
     "get-east-asian-width": "1.4.0",
     "get-stdin": "9.0.0",
-    "graphql": "16.13.0",
+    "graphql": "16.13.1",
     "hermes-parser": "0.33.3",
     "html-element-attributes": "3.5.0",
     "html-ua-styles": "0.3.1",
diff --git a/website/package.json b/website/package.json
index ae33d537d..e8705898b 100644
--- a/website/package.json
+++ b/website/package.json
@@ -32,7 +32,7 @@
     "clsx": "2.1.1",
     "cm6-graphql": "0.2.1",
     "github-buttons": "2.31.1",
-    "graphql": "16.13.0",
+    "graphql": "16.13.1",
     "lz-string": "1.5.0",
     "prism-react-renderer": "2.4.1",
     "react": "19.2.3",
diff --git a/website/yarn.lock b/website/yarn.lock
index 30107fba2..cd16a2078 100644
--- a/website/yarn.lock
+++ b/website/yarn.lock
@@ -8523,10 +8523,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"graphql@npm:16.13.0":
-  version: 16.13.0
-  resolution: "graphql@npm:16.13.0"
-  checksum: 10/c04bd2f168635a7f960bce0447264be84ff633ee0f9f0044b57a9f8a9766f1496860c7f9f89e492f73b46ff0b6f709caef2d7688220d70a9f445b180e605b846
+"graphql@npm:16.13.1":
+  version: 16.13.1
+  resolution: "graphql@npm:16.13.1"
+  checksum: 10/a42f857f60351e1f4665aa5bc5524796d3f45bf81793e6db932f902aff769b0488dafaa1d9c07bddda7122a1f6d0b0105fab12d38992f6b6fb81fc3d7ced1afc
   languageName: node
   linkType: hard
 
@@ -13323,7 +13323,7 @@ __metadata:
     cm6-graphql: "npm:0.2.1"
     concurrently: "npm:9.2.1"
     github-buttons: "npm:2.31.1"
-    graphql: "npm:16.13.0"
+    graphql: "npm:16.13.1"
     lz-string: "npm:1.5.0"
     package-dependencies-tree: "npm:0.0.1"
     prism-react-renderer: "npm:2.4.1"
diff --git a/yarn.lock b/yarn.lock
index 5317915d0..f2ebe9df4 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -5411,10 +5411,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"graphql@npm:16.13.0":
-  version: 16.13.0
-  resolution: "graphql@npm:16.13.0"
-  checksum: 10/c04bd2f168635a7f960bce0447264be84ff633ee0f9f0044b57a9f8a9766f1496860c7f9f89e492f73b46ff0b6f709caef2d7688220d70a9f445b180e605b846
+"graphql@npm:16.13.1":
+  version: 16.13.1
+  resolution: "graphql@npm:16.13.1"
+  checksum: 10/a42f857f60351e1f4665aa5bc5524796d3f45bf81793e6db932f902aff769b0488dafaa1d9c07bddda7122a1f6d0b0105fab12d38992f6b6fb81fc3d7ced1afc
   languageName: node
   linkType: hard
 
@@ -8437,7 +8437,7 @@ __metadata:
     get-stdin: "npm:9.0.0"
     gfm-test-suite: "npm:0.0.2"
     globals: "npm:17.3.0"
-    graphql: "npm:16.13.0"
+    graphql: "npm:16.13.1"
     hermes-parser: "npm:0.33.3"
     html-element-attributes: "npm:3.5.0"
     html-ua-styles: "npm:0.3.1"