diff --git a/web/ui/react-app/package-lock.json b/web/ui/react-app/package-lock.json
index cddcb28d39..05eed8f882 100644
--- a/web/ui/react-app/package-lock.json
+++ b/web/ui/react-app/package-lock.json
@@ -72,7 +72,7 @@
         "mutationobserver-shim": "^0.3.7",
         "prettier": "^3.5.2",
         "react-scripts": "^5.0.1",
-        "sinon": "^19.0.2",
+        "sinon": "^19.0.4",
         "ts-jest": "^29.2.6"
       },
       "optionalDependencies": {
@@ -21632,14 +21632,14 @@
       "dev": true
     },
     "node_modules/sinon": {
-      "version": "19.0.2",
-      "resolved": "https://registry.npmjs.org/sinon/-/sinon-19.0.2.tgz",
-      "integrity": "sha512-euuToqM+PjO4UgXeLETsfQiuoyPXlqFezr6YZDFwHR3t4qaX0fZUe1MfPMznTL5f8BWrVS89KduLdMUsxFCO6g==",
+      "version": "19.0.4",
+      "resolved": "https://registry.npmjs.org/sinon/-/sinon-19.0.4.tgz",
+      "integrity": "sha512-myidFob7fjmYHJb+CHNLtAYScxn3sngGq4t75L2rCGGpE/k4OQVkN3KE5FsN+XkO2+fcDZ65PGvq3KHrlLAm7g==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
         "@sinonjs/commons": "^3.0.1",
-        "@sinonjs/fake-timers": "^13.0.2",
+        "@sinonjs/fake-timers": "^13.0.5",
         "@sinonjs/samsam": "^8.0.1",
         "diff": "^7.0.0",
         "nise": "^6.1.1",
diff --git a/web/ui/react-app/package.json b/web/ui/react-app/package.json
index 0455cb2b5c..89e91a148f 100644
--- a/web/ui/react-app/package.json
+++ b/web/ui/react-app/package.json
@@ -89,7 +89,7 @@
     "mutationobserver-shim": "^0.3.7",
     "prettier": "^3.5.2",
     "react-scripts": "^5.0.1",
-    "sinon": "^19.0.2",
+    "sinon": "^19.0.4",
     "ts-jest": "^29.2.6"
   },
   "jest": {