diff --git a/extensions/ql-vscode/package-lock.json b/extensions/ql-vscode/package-lock.json
index 478f098b518..c72c456e1bf 100644
--- a/extensions/ql-vscode/package-lock.json
+++ b/extensions/ql-vscode/package-lock.json
@@ -34,7 +34,7 @@
         "semver": "^7.6.2",
         "source-map": "^0.7.6",
         "source-map-support": "^0.5.21",
-        "stream-json": "^1.7.3",
+        "stream-json": "^1.9.1",
         "styled-components": "^6.1.13",
         "tmp": "^0.2.5",
         "tmp-promise": "^3.0.2",
@@ -88,7 +88,7 @@
         "@types/react-dom": "^19.2.3",
         "@types/sarif": "^2.1.2",
         "@types/semver": "^7.5.8",
-        "@types/stream-json": "^1.7.1",
+        "@types/stream-json": "^1.7.8",
         "@types/styled-components": "^5.1.11",
         "@types/tar-stream": "^3.1.3",
         "@types/through2": "^2.0.36",
@@ -8477,10 +8477,11 @@
       }
     },
     "node_modules/@types/stream-json": {
-      "version": "1.7.7",
-      "resolved": "https://registry.npmjs.org/@types/stream-json/-/stream-json-1.7.7.tgz",
-      "integrity": "sha512-hHG7cLQ09H/m9i0jzL6UJAeLLxIWej90ECn0svO4T8J0nGcl89xZDQ2ujT4WKlvg0GWkcxJbjIDzW/v7BYUM6Q==",
+      "version": "1.7.8",
+      "resolved": "https://registry.npmjs.org/@types/stream-json/-/stream-json-1.7.8.tgz",
+      "integrity": "sha512-MU1OB1eFLcYWd1LjwKXrxdoPtXSRzRmAnnxs4Js/ayB5O/NvHraWwuOaqMWIebpYwM6khFlsJOHEhI9xK/ab4Q==",
       "dev": true,
+      "license": "MIT",
       "dependencies": {
         "@types/node": "*",
         "@types/stream-chain": "*"
@@ -25225,9 +25226,10 @@
       "dev": true
     },
     "node_modules/stream-json": {
-      "version": "1.8.0",
-      "resolved": "https://registry.npmjs.org/stream-json/-/stream-json-1.8.0.tgz",
-      "integrity": "sha512-HZfXngYHUAr1exT4fxlbc1IOce1RYxp2ldeaf97LYCOPSoOqY/1Psp7iGvpb+6JIOgkra9zDYnPX01hGAHzEPw==",
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/stream-json/-/stream-json-1.9.1.tgz",
+      "integrity": "sha512-uWkjJ+2Nt/LO9Z/JyKZbMusL8Dkh97uUBTv3AJQ74y07lVahLY4eEFsPsE97pxYBwr8nnjMAIch5eqI0gPShyw==",
+      "license": "BSD-3-Clause",
       "dependencies": {
         "stream-chain": "^2.2.5"
       }
diff --git a/extensions/ql-vscode/package.json b/extensions/ql-vscode/package.json
index 3776251e4fe..82ccb309d50 100644
--- a/extensions/ql-vscode/package.json
+++ b/extensions/ql-vscode/package.json
@@ -2085,7 +2085,7 @@
     "semver": "^7.6.2",
     "source-map": "^0.7.6",
     "source-map-support": "^0.5.21",
-    "stream-json": "^1.7.3",
+    "stream-json": "^1.9.1",
     "styled-components": "^6.1.13",
     "tmp": "^0.2.5",
     "tmp-promise": "^3.0.2",
@@ -2139,7 +2139,7 @@
     "@types/react-dom": "^19.2.3",
     "@types/sarif": "^2.1.2",
     "@types/semver": "^7.5.8",
-    "@types/stream-json": "^1.7.1",
+    "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
     "@types/tar-stream": "^3.1.3",
     "@types/through2": "^2.0.36",