diff --git a/package.json b/package.json
index 28258e6d9..12b6062b0 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
     "cookie-parser": "1.4.6",
     "deep-freeze": "0.0.1",
     "diff-match-patch": "git+https://github.com/hackmdio/diff-match-patch.git",
-    "ejs": "3.1.9",
+    "ejs": "3.1.10",
     "express": "4.19.2",
     "express-session": "1.18.0",
     "file-type": "18.7.0",
diff --git a/yarn.lock b/yarn.lock
index f36585290..998229dab 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1209,7 +1209,7 @@ __metadata:
     css-loader: 5.2.7
     deep-freeze: 0.0.1
     diff-match-patch: "git+https://github.com/hackmdio/diff-match-patch.git"
-    ejs: 3.1.9
+    ejs: 3.1.10
     emojify.js: 1.1.0
     esbuild-loader: 4.2.2
     escape-html: 1.0.3
@@ -5470,14 +5470,14 @@ __metadata:
   languageName: node
   linkType: hard
 
-"ejs@npm:3.1.9":
-  version: 3.1.9
-  resolution: "ejs@npm:3.1.9"
+"ejs@npm:3.1.10":
+  version: 3.1.10
+  resolution: "ejs@npm:3.1.10"
   dependencies:
     jake: ^10.8.5
   bin:
     ejs: bin/cli.js
-  checksum: af6f10eb815885ff8a8cfacc42c6b6cf87daf97a4884f87a30e0c3271fedd85d76a3a297d9c33a70e735b97ee632887f85e32854b9cdd3a2d97edf931519a35f
+  checksum: ce90637e9c7538663ae023b8a7a380b2ef7cc4096de70be85abf5a3b9641912dde65353211d05e24d56b1f242d71185c6d00e02cb8860701d571786d92c71f05
   languageName: node
   linkType: hard