diff --git a/package.json b/package.json
index ffed3d79da0..fd757ad1850 100644
--- a/package.json
+++ b/package.json
@@ -91,7 +91,7 @@
     "@type-cacheable/ioredis-adapter": "^10.0.4",
     "agentkeepalive": "^4.6.0",
     "app-store-server-api": "^0.16.0",
-    "axios": "^1.15.0",
+    "axios": "^1.15.2",
     "base64url": "^3.0.1",
     "bn.js": "^5.2.3",
     "class-transformer": "^0.5.1",
diff --git a/packages/fxa-event-broker/package.json b/packages/fxa-event-broker/package.json
index 634670f5bff..8bc2ee32178 100644
--- a/packages/fxa-event-broker/package.json
+++ b/packages/fxa-event-broker/package.json
@@ -36,7 +36,7 @@
   "dependencies": {
     "@aws-sdk/client-sqs": "^3.973.0",
     "@types/sinon": "10.0.1",
-    "axios": "^1.15.0",
+    "axios": "^1.15.2",
     "convict": "^6.2.5",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
diff --git a/yarn.lock b/yarn.lock
index 67e40240f5e..58aa46d3069 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -31214,7 +31214,7 @@ __metadata:
     "@typescript-eslint/eslint-plugin": "npm:^5.59.0"
     "@typescript-eslint/parser": "npm:^7.1.1"
     audit-filter: "npm:^0.5.0"
-    axios: "npm:^1.15.0"
+    axios: "npm:^1.15.2"
     chance: "npm:^1.1.8"
     convict: "npm:^6.2.5"
     convict-format-with-moment: "npm:^6.2.0"
@@ -31689,7 +31689,7 @@ __metadata:
     agentkeepalive: "npm:^4.6.0"
     app-store-server-api: "npm:^0.16.0"
     autoprefixer: "npm:^10.4.14"
-    axios: "npm:^1.15.0"
+    axios: "npm:^1.15.2"
     babel-eslint: "npm:^10.1.0"
     babel-jest: "npm:29.7.0"
     base64url: "npm:^3.0.1"