diff --git a/package.json b/package.json
index 1b440c27..5f71846c 100644
--- a/package.json
+++ b/package.json
@@ -118,7 +118,7 @@
       "lodash-es": ">=4.17.23",
       "hono": ">=4.12.14",
       "@hono/node-server": "^1.19.14",
-      "defu": "^6.1.5",
+      "defu": "^6.1.7",
       "rollup": ">=4.59.0",
       "undici": "7.24.6",
       "kysely": ">=0.28.14",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index cf4109b0..c2a73c34 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -10,7 +10,7 @@ overrides:
   lodash-es: '>=4.17.23'
   hono: '>=4.12.14'
   '@hono/node-server': ^1.19.14
-  defu: ^6.1.5
+  defu: ^6.1.7
   rollup: '>=4.59.0'
   undici: 7.24.6
   kysely: '>=0.28.14'
@@ -1915,6 +1915,7 @@ packages:
 
   '@ungap/structured-clone@1.3.0':
     resolution: {integrity: sha512-WmoN8qaIAo7WTYWbAZuG8PYEhn5fkz7dZrqTBZ7dtt//lL2Gwms1IcnQ5yHqjDfX8Ft5j4YzDM23f87zBfDe9g==}
+    deprecated: Potential CWE-502 - Update to 1.3.1 or higher
 
   '@vercel/oidc@3.1.0':
     resolution: {integrity: sha512-Fw28YZpRnA3cAHHDlkt7xQHiJ0fcL+NRcIqsocZQUSmbzeIKRpwttJjik5ZGanXP+vlA4SbTg+AbA3bP363l+w==}