diff --git a/app/package-lock.json b/app/package-lock.json
index b0195dc0b..f8486de37 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -30,7 +30,7 @@
         "pouchdb-browser": "^8.0.1"
       },
       "devDependencies": {
-        "@cyclonedx/cyclonedx-npm": "^4.2.1",
+        "@cyclonedx/cyclonedx-npm": "^5.0.0",
         "@parcel/plugin": "^2.16.4",
         "@parcel/reporter-cli": "^2.16.4",
         "@parcel/transformer-less": "^2.16.4",
@@ -101,9 +101,9 @@
       }
     },
     "node_modules/@cyclonedx/cyclonedx-npm": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-4.2.1.tgz",
-      "integrity": "sha512-SOA/96sf0wsgUYCRtFkLFm6WoFhG+q1BxdC84hPSn9J3xWlH1e7OnTPJT+WNUzTqzX1nSm5JhjRX4krozu2X+g==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-5.0.0.tgz",
+      "integrity": "sha512-pEz/pqYJHQ0ZvY5xFJa+GQ5AjNL7JOEJCXCHymvKo2N1VnzKE1ROpkumduJt8a0DukQjQfBGRXouGQ9xqJtJaQ==",
       "dev": true,
       "funding": [
         {
@@ -111,7 +111,6 @@
           "url": "https://owasp.org/donate/?reponame=www-project-cyclonedx&title=OWASP+CycloneDX"
         }
       ],
-      "license": "Apache-2.0",
       "dependencies": {
         "@cyclonedx/cyclonedx-library": "^10.0.0",
         "commander": "^14.0.0",
@@ -7513,9 +7512,9 @@
       "requires": {}
     },
     "@cyclonedx/cyclonedx-npm": {
-      "version": "4.2.1",
-      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-4.2.1.tgz",
-      "integrity": "sha512-SOA/96sf0wsgUYCRtFkLFm6WoFhG+q1BxdC84hPSn9J3xWlH1e7OnTPJT+WNUzTqzX1nSm5JhjRX4krozu2X+g==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/@cyclonedx/cyclonedx-npm/-/cyclonedx-npm-5.0.0.tgz",
+      "integrity": "sha512-pEz/pqYJHQ0ZvY5xFJa+GQ5AjNL7JOEJCXCHymvKo2N1VnzKE1ROpkumduJt8a0DukQjQfBGRXouGQ9xqJtJaQ==",
       "dev": true,
       "requires": {
         "@cyclonedx/cyclonedx-library": "^10.0.0",
diff --git a/app/package.json b/app/package.json
index c65df5c2d..bce635b75 100644
--- a/app/package.json
+++ b/app/package.json
@@ -21,7 +21,7 @@
     "sbom": "cyclonedx-npm --output-format JSON --output-file target/npm-bom.cdx.json --omit dev"
   },
   "devDependencies": {
-    "@cyclonedx/cyclonedx-npm": "^4.2.1",
+    "@cyclonedx/cyclonedx-npm": "^5.0.0",
     "@parcel/plugin": "^2.16.4",
     "@parcel/reporter-cli": "^2.16.4",
     "@parcel/transformer-less": "^2.16.4",