diff --git a/package-lock.json b/package-lock.json
index addba15d1..e8273d230 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20553,9 +20553,9 @@
       "license": "MIT"
     },
     "node_modules/sax": {
-      "version": "1.4.4",
-      "resolved": "https://registry.npmjs.org/sax/-/sax-1.4.4.tgz",
-      "integrity": "sha512-1n3r/tGXO6b6VXMdFT54SHzT9ytu9yr7TaELowdYpMqY/Ao7EnlQGmAQ1+RatX7Tkkdm6hONI2owqNx2aZj5Sw==",
+      "version": "1.6.0",
+      "resolved": "https://registry.npmjs.org/sax/-/sax-1.6.0.tgz",
+      "integrity": "sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==",
       "license": "BlueOak-1.0.0",
       "engines": {
         "node": ">=11.0.0"
@@ -20984,18 +20984,18 @@
       }
     },
     "node_modules/soap": {
-      "version": "1.7.1",
-      "resolved": "https://registry.npmjs.org/soap/-/soap-1.7.1.tgz",
-      "integrity": "sha512-PYDzr2F0eb0cpyTB+hg21rzj5/wfo1AeKy3HnOVx65+eFDUUY1FOtqC/ev0pwW5Y9UcvHWJ5egr8HQsCzE92Ig==",
+      "version": "1.9.1",
+      "resolved": "https://registry.npmjs.org/soap/-/soap-1.9.1.tgz",
+      "integrity": "sha512-cIVVmbIEG6ZArUDzV3k/kAHYx1OtVP0eFMyqBjzLIUG3WhKZZ3iTcW4QT7vc8gBTVmcPUCBD+WYVHuXdfKoGrg==",
       "license": "MIT",
       "dependencies": {
-        "axios": "^1.13.5",
+        "axios": "^1.15.0",
         "axios-ntlm": "^1.4.6",
         "debug": "^4.4.3",
         "follow-redirects": "^1.15.11",
         "formidable": "^3.5.4",
-        "sax": "^1.4.1",
-        "whatwg-mimetype": "4.0.0",
+        "sax": "^1.6.0",
+        "whatwg-mimetype": "5.0.0",
         "xml-crypto": "^6.1.2"
       },
       "engines": {
@@ -23026,12 +23026,12 @@
       }
     },
     "node_modules/whatwg-mimetype": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-4.0.0.tgz",
-      "integrity": "sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==",
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-5.0.0.tgz",
+      "integrity": "sha512-sXcNcHOC51uPGF0P/D4NVtrkjSU2fNsm9iog4ZvZJsL3rjoDAzXZhkm2MWt1y+PUdggKAYVoMAIYcs78wJ51Cw==",
       "license": "MIT",
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       }
     },
     "node_modules/whatwg-url": {
@@ -23505,7 +23505,7 @@
         "pino-http": "^11.0.0",
         "reflect-metadata": "^0.2.2",
         "rxjs": "^7.8.1",
-        "soap": "^1.1.9",
+        "soap": "^1.9.1",
         "swagger-parser": "^10.0.3",
         "zod": "^4.3.6"
       },
diff --git a/packages/backend/package.json b/packages/backend/package.json
index f2a8a1355..7e877d114 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -66,7 +66,7 @@
     "pino-http": "^11.0.0",
     "reflect-metadata": "^0.2.2",
     "rxjs": "^7.8.1",
-    "soap": "^1.1.9",
+    "soap": "^1.9.1",
     "swagger-parser": "^10.0.3",
     "zod": "^4.3.6"
   },