diff --git a/extensions/ql-vscode/package-lock.json b/extensions/ql-vscode/package-lock.json
index c17351b00e7..4dfe3c25f58 100644
--- a/extensions/ql-vscode/package-lock.json
+++ b/extensions/ql-vscode/package-lock.json
@@ -32,7 +32,7 @@
         "proper-lockfile": "^4.1.2",
         "react": "^19.2.3",
         "react-dom": "^19.2.3",
-        "semver": "^7.6.2",
+        "semver": "^7.7.4",
         "source-map": "^0.7.6",
         "source-map-support": "^0.5.21",
         "stream-json": "^1.9.1",
@@ -82,7 +82,7 @@
         "@types/react": "^19.2.3",
         "@types/react-dom": "^19.2.3",
         "@types/sarif": "^2.1.2",
-        "@types/semver": "^7.5.8",
+        "@types/semver": "^7.7.1",
         "@types/stream-json": "^1.7.8",
         "@types/styled-components": "^5.1.11",
         "@types/tar-stream": "^3.1.4",
@@ -8663,10 +8663,11 @@
       "dev": true
     },
     "node_modules/@types/semver": {
-      "version": "7.5.8",
-      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.5.8.tgz",
-      "integrity": "sha512-I8EUhyrgfLrcTkzV3TSsGyl1tSuPrEDzr0yd5m90UgNxQkyDXULk3b6MlQqTCpZpNtWe1K0hzclnZkTcLBe2UQ==",
-      "dev": true
+      "version": "7.7.1",
+      "resolved": "https://registry.npmjs.org/@types/semver/-/semver-7.7.1.tgz",
+      "integrity": "sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==",
+      "dev": true,
+      "license": "MIT"
     },
     "node_modules/@types/shimmer": {
       "version": "1.0.5",
@@ -25381,9 +25382,9 @@
       }
     },
     "node_modules/semver": {
-      "version": "7.7.3",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
-      "integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
+      "version": "7.7.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
+      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
diff --git a/extensions/ql-vscode/package.json b/extensions/ql-vscode/package.json
index 85d06eb18c8..84046d490a6 100644
--- a/extensions/ql-vscode/package.json
+++ b/extensions/ql-vscode/package.json
@@ -2083,7 +2083,7 @@
     "proper-lockfile": "^4.1.2",
     "react": "^19.2.3",
     "react-dom": "^19.2.3",
-    "semver": "^7.6.2",
+    "semver": "^7.7.4",
     "source-map": "^0.7.6",
     "source-map-support": "^0.5.21",
     "stream-json": "^1.9.1",
@@ -2133,7 +2133,7 @@
     "@types/react": "^19.2.3",
     "@types/react-dom": "^19.2.3",
     "@types/sarif": "^2.1.2",
-    "@types/semver": "^7.5.8",
+    "@types/semver": "^7.7.1",
     "@types/stream-json": "^1.7.8",
     "@types/styled-components": "^5.1.11",
     "@types/tar-stream": "^3.1.4",