diff --git a/package.json b/package.json
index 0ba936f5..6ae7cc32 100644
--- a/package.json
+++ b/package.json
@@ -156,7 +156,8 @@
             "proxy-addr@>=1.1.0 <2.0.8": ">=2.0.8 <3",
             "compression@<1.8.2": ">=1.8.2 <2",
             "postcss-selector-parser@<7.1.6": ">=7.1.6 <8",
-            "@modelcontextprotocol/sdk@>=1.12.0 <1.31.0": ">=1.31.0 <2"
+            "@modelcontextprotocol/sdk@>=1.12.0 <1.31.0": ">=1.31.0 <2",
+            "handlebars@<4.7.10": ">=4.7.10 <5"
         },
         "auditConfig": {
             "ignoreGhsas": [
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 765fd780..974a5a6a 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -33,6 +33,7 @@ overrides:
   compression@<1.8.2: '>=1.8.2 <2'
   postcss-selector-parser@<7.1.6: '>=7.1.6 <8'
   '@modelcontextprotocol/sdk@>=1.12.0 <1.31.0': '>=1.31.0 <2'
+  handlebars@<4.7.10: '>=4.7.10 <5'
 
 importers:
 
@@ -4041,8 +4042,8 @@ packages:
     resolution: {integrity: sha512-Chq1s4CY7jmh8gO2qvLIJyfCDIN+EHLFW/9iShnp1z8FjBQMoodWP1kDC36VAMXXIvAjj4ARa7ntfAV2BrjsbA==}
     engines: {node: ^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0}
 
-  handlebars@4.7.9:
-    resolution: {integrity: sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==}
+  handlebars@4.7.10:
+    resolution: {integrity: sha512-P5VJMVM7qgBn6vjXMw8WG9uVI+ncf2pi72j4de4yz5ZULLj2RGqLYaKOYGsgyrViQ0tePOVlN1tDCCXXtFqXKg==}
     engines: {node: '>=0.4.7'}
     hasBin: true
 
@@ -6957,7 +6958,7 @@ snapshots:
     dependencies:
       eslint-import-resolver-node: 0.3.9
       eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.68.0(eslint@10.9.1(jiti@2.7.0))(typescript@6.0.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@4.4.5(eslint@10.9.1(jiti@2.7.0)))(eslint@10.9.1(jiti@2.7.0))
-      handlebars: 4.7.9
+      handlebars: 4.7.10
       is-core-module: 2.16.1
       micromatch: 4.0.8
     transitivePeerDependencies:
@@ -10202,7 +10203,7 @@ snapshots:
       eslint: 10.9.1(jiti@2.7.0)
       eslint-import-resolver-node: 0.3.9
       eslint-module-utils: 2.12.1(@typescript-eslint/parser@8.68.0(eslint@10.9.1(jiti@2.7.0))(typescript@6.0.3))(eslint-import-resolver-node@0.3.9)(eslint-import-resolver-typescript@4.4.5(eslint@10.9.1(jiti@2.7.0)))(eslint@10.9.1(jiti@2.7.0))
-      handlebars: 4.7.9
+      handlebars: 4.7.10
       micromatch: 4.0.8
     transitivePeerDependencies:
       - '@typescript-eslint/parser'
@@ -10676,7 +10677,7 @@ snapshots:
   graphql@16.14.2:
     optional: true
 
-  handlebars@4.7.9:
+  handlebars@4.7.10:
     dependencies:
       minimist: 1.2.8
       neo-async: 2.6.2