diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b89bc2953239d..7d0f13e7f1957 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -378,8 +378,8 @@ importers:
         specifier: ^10.26.7
         version: 10.28.0
       qs:
-        specifier: ^6.13.1
-        version: 6.14.0
+        specifier: ^6.14.2
+        version: 6.14.2
       ramda:
         specifier: ^0.32.0
         version: 0.32.0
@@ -4068,8 +4068,8 @@ packages:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
-  qs@6.14.0:
-    resolution: {integrity: sha512-YWWTjgABSKcvs/nWBi9PycY/JiPJqOD4JA6o9Sej2AtvSGarXxKC3OQSk4pAarbdQlKAh5D4FCQkJNkW+GAn3w==}
+  qs@6.14.2:
+    resolution: {integrity: sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==}
     engines: {node: '>=0.6'}
 
   quansync@1.0.0:
@@ -7047,7 +7047,7 @@ snapshots:
       http-errors: 2.0.1
       iconv-lite: 0.7.2
       on-finished: 2.4.1
-      qs: 6.14.0
+      qs: 6.14.2
       raw-body: 3.0.2
       type-is: 2.0.1
     transitivePeerDependencies:
@@ -7556,7 +7556,7 @@ snapshots:
       once: 1.4.0
       parseurl: 1.3.3
       proxy-addr: 2.0.7
-      qs: 6.14.0
+      qs: 6.14.2
       range-parser: 1.2.1
       router: 2.2.0
       send: 1.2.1
@@ -8159,7 +8159,7 @@ snapshots:
 
   punycode@2.3.1: {}
 
-  qs@6.14.0:
+  qs@6.14.2:
     dependencies:
       side-channel: 1.1.0
 
@@ -8452,7 +8452,7 @@ snapshots:
       formidable: 3.5.4
       methods: 1.1.2
       mime: 2.6.0
-      qs: 6.14.0
+      qs: 6.14.2
     transitivePeerDependencies:
       - supports-color
 
diff --git a/tasks/e2e/package.json b/tasks/e2e/package.json
index dfea0b7759ac0..38b6ac1622018 100644
--- a/tasks/e2e/package.json
+++ b/tasks/e2e/package.json
@@ -33,7 +33,7 @@
     "oxc-minify": "link:../../napi/minify",
     "oxc-transform": "link:../../napi/transform",
     "preact": "^10.26.7",
-    "qs": "^6.13.1",
+    "qs": "^6.14.2",
     "ramda": "^0.32.0",
     "react": "=19.2.3",
     "react-dom": "=19.2.3",