diff --git a/package-lock.json b/package-lock.json
index 31b32e058..4d97f7817 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -29,7 +29,7 @@
         "@redhat-cloud-services/javascript-clients-shared": "^1.2.4",
         "@unleash/proxy-client-react": "^3.5.0",
         "axios": "^1.6.8",
-        "graphql": "^16.8.1",
+        "graphql": "^16.9.0",
         "json-api-normalizer": "1.0.1",
         "linkifyjs": "^2.1.9",
         "p-all": "^5.0.0",
@@ -13106,7 +13106,9 @@
       "license": "MIT"
     },
     "node_modules/graphql": {
-      "version": "16.8.1",
+      "version": "16.9.0",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.9.0.tgz",
+      "integrity": "sha512-GGTKBX4SD7Wdb8mqeDLni2oaRGYQWjWHGKPQ24ZMnUtKfcsVoiv4uX8+LJr1K6U5VW2Lu1BwJnj7uiori0YtRw==",
       "license": "MIT",
       "engines": {
         "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
diff --git a/package.json b/package.json
index 5c7efa0a3..0fa3bcdff 100644
--- a/package.json
+++ b/package.json
@@ -26,7 +26,7 @@
     "@redhat-cloud-services/javascript-clients-shared": "^1.2.4",
     "@unleash/proxy-client-react": "^3.5.0",
     "axios": "^1.6.8",
-    "graphql": "^16.8.1",
+    "graphql": "^16.9.0",
     "json-api-normalizer": "1.0.1",
     "linkifyjs": "^2.1.9",
     "p-all": "^5.0.0",