diff --git a/package.json b/package.json
index b9608850f97..a1332810a9b 100644
--- a/package.json
+++ b/package.json
@@ -91,7 +91,7 @@
     "@type-cacheable/ioredis-adapter": "^10.0.4",
     "agentkeepalive": "^4.6.0",
     "app-store-server-api": "^0.16.0",
-    "axios": "^1.13.5",
+    "axios": "^1.15.0",
     "base64url": "^3.0.1",
     "bn.js": "^5.2.3",
     "class-transformer": "^0.5.1",
diff --git a/packages/fxa-event-broker/package.json b/packages/fxa-event-broker/package.json
index 6a08d7f6dd8..16269c8f6fc 100644
--- a/packages/fxa-event-broker/package.json
+++ b/packages/fxa-event-broker/package.json
@@ -36,7 +36,7 @@
   "dependencies": {
     "@aws-sdk/client-sqs": "^3.973.0",
     "@types/sinon": "10.0.1",
-    "axios": "^1.13.5",
+    "axios": "^1.15.0",
     "convict": "^6.2.5",
     "convict-format-with-moment": "^6.2.0",
     "convict-format-with-validator": "^6.2.0",
diff --git a/yarn.lock b/yarn.lock
index 97803495178..a9c715698b7 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -32156,7 +32156,7 @@ __metadata:
     "@typescript-eslint/eslint-plugin": "npm:^5.59.0"
     "@typescript-eslint/parser": "npm:^7.1.1"
     audit-filter: "npm:^0.5.0"
-    axios: "npm:^1.13.5"
+    axios: "npm:^1.15.0"
     chance: "npm:^1.1.8"
     convict: "npm:^6.2.5"
     convict-format-with-moment: "npm:^6.2.0"
@@ -32732,7 +32732,7 @@ __metadata:
     agentkeepalive: "npm:^4.6.0"
     app-store-server-api: "npm:^0.16.0"
     autoprefixer: "npm:^10.4.14"
-    axios: "npm:^1.13.5"
+    axios: "npm:^1.15.0"
     babel-eslint: "npm:^10.1.0"
     babel-jest: "npm:29.7.0"
     base64url: "npm:^3.0.1"