diff --git a/packages/api/package.json b/packages/api/package.json
index f4d11521..0af39513 100644
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -24,7 +24,7 @@
     "@turf/square-grid": "^6.5.0",
     "@turf/triangle-grid": "^6.5.0",
     "apicache": "^1.6.2",
-    "config": "^3.3.6",
+    "config": "^3.3.12",
     "csv-stringify": "^6.5.1",
     "dashify": "^2.0.0",
     "got": "^11.8.2",
diff --git a/packages/models/package.json b/packages/models/package.json
index fd5f45bd..72ff9b37 100644
--- a/packages/models/package.json
+++ b/packages/models/package.json
@@ -12,7 +12,7 @@
     "@sensebox/sketch-templater": "1.13.1",
     "bcrypt": "^5.1.1",
     "bullmq": "^4.12.3",
-    "config": "^3.3.6",
+    "config": "^3.3.12",
     "drizzle-orm": "^0.33.0",
     "got": "^11.8.2",
     "isemail": "^3.0.0",
diff --git a/yarn.lock b/yarn.lock
index dc843bd6..9e98f810 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -1301,20 +1301,13 @@ concat-stream@^2.0.0:
     readable-stream "^3.0.2"
     typedarray "^0.0.6"
 
-config@^3.3.6:
-  version "3.3.9"
-  resolved "https://registry.yarnpkg.com/config/-/config-3.3.9.tgz#27fae95b43e0e1d5723e54143c090954d8e49572"
-  integrity sha512-G17nfe+cY7kR0wVpc49NCYvNtelm/pPy8czHoFkAgtV1lkmcp7DHtWCdDu+C9Z7gb2WVqa9Tm3uF9aKaPbCfhg==
+config@^3.3.12, config@^3.3.7:
+  version "3.3.12"
+  resolved "https://registry.yarnpkg.com/config/-/config-3.3.12.tgz#a10ae66efcc3e48c1879fbb657c86c4ef6c7b25e"
+  integrity sha512-Vmx389R/QVM3foxqBzXO8t2tUikYZP64Q6vQxGrsMpREeJc/aWRnPRERXWsYzOHAumx/AOoILWe6nU3ZJL+6Sw==
   dependencies:
     json5 "^2.2.3"
 
-config@^3.3.7:
-  version "3.3.7"
-  resolved "https://registry.yarnpkg.com/config/-/config-3.3.7.tgz#4310410dc2bf4e0effdca21a12a4035860a24ee4"
-  integrity sha512-mX/n7GKDYZMqvvkY6e6oBY49W8wxdmQt+ho/5lhwFDXqQW9gI+Ahp8EKp8VAbISPnmf2+Bv5uZK7lKXZ6pf1aA==
-  dependencies:
-    json5 "^2.1.1"
-
 console-control-strings@^1.0.0, console-control-strings@^1.1.0:
   version "1.1.0"
   resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
@@ -2590,7 +2583,7 @@ json-stringify-safe@~5.0.1:
   resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
   integrity sha1-Epai1Y/UXxmg9s4B1lcB4sc1tus=
 
-json5@^2.1.1, json5@^2.2.3:
+json5@^2.2.3:
   version "2.2.3"
   resolved "https://registry.yarnpkg.com/json5/-/json5-2.2.3.tgz#78cd6f1a19bdc12b73db5ad0c61efd66c1e29283"
   integrity sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==