diff --git a/cli/package-lock.json b/cli/package-lock.json
index 30ac387b181e..7a91878de777 100644
--- a/cli/package-lock.json
+++ b/cli/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "pmd",
-  "version": "2.2.0",
+  "version": "2.3.1",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "pmd",
-      "version": "2.2.0",
+      "version": "2.3.1",
       "bin": {
         "pmd": "dist/index.js"
       },
@@ -28,7 +28,7 @@
         "chokidar": "^4.0.3",
         "discord-rpc": "^4.0.1",
         "esbuild": "^0.25.4",
-        "form-data": "^4.0.2",
+        "form-data": "^4.0.4",
         "gitdiff-parser": "^0.3.1",
         "globby": "^14.1.0",
         "got": "^14.4.7",
@@ -3088,15 +3088,16 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.2.tgz",
-      "integrity": "sha512-hGfm/slu0ZabnNt4oaRZ6uREyfCj6P4fT/n6A1rGV+Z0VdGXjfOhVUpkn6qVQONHGIFwmveGXyDs75+nr6FM8w==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
+      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
         "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
         "mime-types": "^2.1.12"
       },
       "engines": {
diff --git a/cli/package.json b/cli/package.json
index b40d54d5d275..0609fbfe64d5 100644
--- a/cli/package.json
+++ b/cli/package.json
@@ -33,7 +33,7 @@
     "chokidar": "^4.0.3",
     "discord-rpc": "^4.0.1",
     "esbuild": "^0.25.4",
-    "form-data": "^4.0.2",
+    "form-data": "^4.0.4",
     "gitdiff-parser": "^0.3.1",
     "globby": "^14.1.0",
     "got": "^14.4.7",