diff --git a/packages/audit/package.json b/packages/audit/package.json
index 5d70ca849..916478280 100644
--- a/packages/audit/package.json
+++ b/packages/audit/package.json
@@ -42,7 +42,7 @@
     "@peac/kernel": "workspace:*",
     "@peac/schema": "workspace:*",
     "yazl": "^3.3.1",
-    "yauzl": "^2.10.0"
+    "yauzl": "^3.2.0"
   },
   "devDependencies": {
     "@types/node": "^22.19.11",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 026fe4260..a676d9911 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -819,8 +819,8 @@ importers:
         specifier: workspace:*
         version: link:../schema
       yauzl:
-        specifier: ^2.10.0
-        version: 2.10.0
+        specifier: ^3.2.0
+        version: 3.2.0
       yazl:
         specifier: ^3.3.1
         version: 3.3.1
@@ -7227,6 +7227,7 @@ packages:
     resolution: {integrity: sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==}
     dependencies:
       pend: 1.2.0
+    dev: true
 
   /fdir@6.5.0(picomatch@4.0.3):
     resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
@@ -10956,6 +10957,15 @@ packages:
     dependencies:
       buffer-crc32: 0.2.13
       fd-slicer: 1.1.0
+    dev: true
+
+  /yauzl@3.2.0:
+    resolution: {integrity: sha512-Ow9nuGZE+qp1u4JIPvg+uCiUr7xGQWdff7JQSk5VGYTAZMDe2q8lxJ10ygv10qmSj031Ty/6FNJpLO4o1Sgc+w==}
+    engines: {node: '>=12'}
+    dependencies:
+      buffer-crc32: 0.2.13
+      pend: 1.2.0
+    dev: false
 
   /yazl@3.3.1:
     resolution: {integrity: sha512-BbETDVWG+VcMUle37k5Fqp//7SDOK2/1+T7X8TD96M3D9G8jK5VLUdQVdVjGi8im7FGkazX7kk5hkU8X4L5Bng==}