diff --git a/cli/CHANGELOG.md b/cli/CHANGELOG.md
index c01992744..0691e887d 100644
--- a/cli/CHANGELOG.md
+++ b/cli/CHANGELOG.md
@@ -8,6 +8,7 @@ This change log covers only the command line interface (CLI) of Open VSX.
 
 - Bump ip-address from `10.2.0` to `10.4.0`
 - Bump fast-uri from `3.1.4` to `3.1.5`
+- Bump js-yaml from `4.3.0` to `4.3.1`
 
 ### [v1.1.0] (02/08/2026)
 
diff --git a/cli/yarn.lock b/cli/yarn.lock
index a556c0cb6..55617b841 100644
--- a/cli/yarn.lock
+++ b/cli/yarn.lock
@@ -3136,13 +3136,13 @@ __metadata:
   linkType: hard
 
 "js-yaml@npm:^4.1.0, js-yaml@npm:^4.1.1":
-  version: 4.3.0
-  resolution: "js-yaml@npm:4.3.0"
+  version: 4.3.1
+  resolution: "js-yaml@npm:4.3.1"
   dependencies:
     argparse: "npm:^2.0.1"
   bin:
     js-yaml: bin/js-yaml.js
-  checksum: 10/2bcec3a8118d7f744badeb04e14366578d234a736f353d41fe35d2305e4ce2409a8e041d277f07cd6bbc8aaa12128d650a68ce43247072519bede20962d2126f
+  checksum: 10/2ce71b5d632abbd77da80447bf860e8a0264e54bffe94840984887d58b023761495b523727547904517a6107a1ef189854b361e0fc44995ee13a84f222d7bd42
   languageName: node
   linkType: hard