diff --git a/server/src/main/webapp/WEB-INF/rails/package.json b/server/src/main/webapp/WEB-INF/rails/package.json
index f0b28a3ea6e..58278f41cfc 100644
--- a/server/src/main/webapp/WEB-INF/rails/package.json
+++ b/server/src/main/webapp/WEB-INF/rails/package.json
@@ -52,7 +52,7 @@
     "normalize-scss": "^8.0.0",
     "opensans": "file:node-vendor/opensans#node-vendor/opensans::hash=930bae&locator=gocd-server-ui%40workspace%3A.",
     "prismjs": "^1.30.0",
-    "shell-quote": "^1.8.4",
+    "shell-quote": "^1.10.0",
     "shellwords-ts": "^3.0.1",
     "underscore.string": "^3.3.6",
     "url-parse": "^1.5.10",
diff --git a/server/src/main/webapp/WEB-INF/rails/yarn.lock b/server/src/main/webapp/WEB-INF/rails/yarn.lock
index 7a6f3b8647c..45153d21cf1 100644
--- a/server/src/main/webapp/WEB-INF/rails/yarn.lock
+++ b/server/src/main/webapp/WEB-INF/rails/yarn.lock
@@ -4847,7 +4847,7 @@ __metadata:
     prismjs: "npm:^1.30.0"
     sass-embedded: "npm:^1.100.0"
     sass-loader: "npm:^17.0.0"
-    shell-quote: "npm:^1.8.4"
+    shell-quote: "npm:^1.10.0"
     shellwords-ts: "npm:^3.0.1"
     simulate-event: "npm:^1.4.0"
     sourcemapped-stacktrace: "npm:^1.1.11"
@@ -8020,10 +8020,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"shell-quote@npm:^1.8.4":
-  version: 1.8.4
-  resolution: "shell-quote@npm:1.8.4"
-  checksum: 10c0/86c93678bc394cb81f5ddcdc87df9c95d279ef9652775cd1cd1eed361404169a8d8cbaacaeed232ab09919e36ee1e5363863570390d78571f8c22b7f6312fb40
+"shell-quote@npm:^1.10.0":
+  version: 1.10.0
+  resolution: "shell-quote@npm:1.10.0"
+  checksum: 10c0/46ee59bfd972ce6a45500c44ed130dff2d0a7d6fbac9841e59d548518cad8060a06393c9a5dcbc0cede294ad80b2a2cd8c904679e09265f53efc0a0879f30961
   languageName: node
   linkType: hard