diff --git a/package-lock.json b/package-lock.json
index 8e998cb9..564218ad 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8316,9 +8316,9 @@
       }
     },
     "node_modules/dayjs": {
-      "version": "1.11.13",
-      "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.13.tgz",
-      "integrity": "sha512-oaMBel6gjolK862uaPQOVTA7q3TZhuSvuMQAAglQDOWYO9A91IrAOUJEyKVlqJlHE0vq5p5UXxzdPfMH/x6xNg==",
+      "version": "1.11.18",
+      "resolved": "https://registry.npmjs.org/dayjs/-/dayjs-1.11.18.tgz",
+      "integrity": "sha512-zFBQ7WFRvVRhKcWoUh+ZA1g2HVgUbsZm9sbddh8EC5iv93sui8DVVz1Npvz+r6meo9VKfa8NyLWBsQK1VvIKPA==",
       "license": "MIT"
     },
     "node_modules/debug": {
@@ -20796,7 +20796,7 @@
       "license": "Apache-2.0",
       "dependencies": {
         "@opentelemetry/api": "^1.9.0",
-        "dayjs": "^1.11.13"
+        "dayjs": "^1.11.18"
       },
       "devDependencies": {
         "@types/uuid": "^10.0.0"
diff --git a/src/ax/package.json b/src/ax/package.json
index 45e083c9..ca2a9c24 100644
--- a/src/ax/package.json
+++ b/src/ax/package.json
@@ -36,7 +36,7 @@
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
-    "dayjs": "^1.11.13"
+    "dayjs": "^1.11.18"
   },
   "ava": {
     "failFast": true,