diff --git a/javascript/frameworks/cap/test/models/cds/entityreference/package.json b/javascript/frameworks/cap/test/models/cds/entityreference/package.json
index f541b5515..4c5d0df15 100644
--- a/javascript/frameworks/cap/test/models/cds/entityreference/package.json
+++ b/javascript/frameworks/cap/test/models/cds/entityreference/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/entityreference",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.22.2",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/models/cds/remoteflowsources/package.json b/javascript/frameworks/cap/test/models/cds/remoteflowsources/package.json
index be11dbc27..ebbe6f473 100644
--- a/javascript/frameworks/cap/test/models/cds/remoteflowsources/package.json
+++ b/javascript/frameworks/cap/test/models/cds/remoteflowsources/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/log-injection",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-cds-authz/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-cds-authz/package.json
index 03530db3b..dfd17caa5 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-cds-authz/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-cds-authz/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/entities-exposed-with-cds-authz",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz-cds-serve/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz-cds-serve/package.json
index d15a2a9a5..e3dc497f0 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz-cds-serve/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz-cds-serve/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/entities-exposed-with-js-authz",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz/package.json
index d15a2a9a5..e3dc497f0 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-js-authz/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/entities-exposed-with-js-authz",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-no-authz/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-no-authz/package.json
index 4497a2349..d32ab26f4 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-no-authz/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/entities-with-no-authz/entities-exposed-with-no-authz/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/entities-exposed-with-no-authz",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/default-is-privileged/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/default-is-privileged/package.json
index 8652a7330..4a9f2b233 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/default-is-privileged/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/default-is-privileged/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/default-is-privileged",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/unnecessarily-granted-privileged-access-rights/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/unnecessarily-granted-privileged-access-rights/package.json
index ee1df7214..7767ef8a1 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/unnecessarily-granted-privileged-access-rights/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/misused-privileged-user/unnecessarily-granted-privileged-access-rights/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/unnecessarily-granted-privileged-access-rights",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "*",
-    "express": "^4.22.2",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/basic-authentication/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/basic-authentication/package.json
index 7e5e45462..0fe70ec8a 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/basic-authentication/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/basic-authentication/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/basic-authentication",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/dummy-authentication/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/dummy-authentication/package.json
index e22190217..bf110df8d 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/dummy-authentication/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/dummy-authentication/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/dummy-authentication",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/mocked-authentication/package.json b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/mocked-authentication/package.json
index 7c4a69e6e..050fe5471 100644
--- a/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/mocked-authentication/package.json
+++ b/javascript/frameworks/cap/test/queries/bad-authn-authz/nonprod-authn-strategy/mocked-authentication/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/mocked-authentication",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1",
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1",
     "@cap-js/sqlite": "*"
   },
   "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/cqlinjection/package.json b/javascript/frameworks/cap/test/queries/cqlinjection/package.json
index 9845c03b5..00d37b1c0 100644
--- a/javascript/frameworks/cap/test/queries/cqlinjection/package.json
+++ b/javascript/frameworks/cap/test/queries/cqlinjection/package.json
@@ -3,9 +3,9 @@
   "version": "1.0.0",
   "dependencies": {
     "@cap-js/sqlite": "*",
-    "@sap/cds": "^9",
-    "@sap/cds-dk": "^9.0.5",
-    "express": "^4.17.1"
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1"
   },
   "scripts": {
     "start": "cds-serve",
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-not-depending-on-request/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-not-depending-on-request/package.json
index fba5217ac..331ebda83 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-not-depending-on-request/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-not-depending-on-request/package.json
@@ -2,8 +2,9 @@
   "name": "@advanced-security/log-injection",
   "version": "1.0.0",
   "dependencies": {
-    "@sap/cds": "^7",
-    "express": "^4.17.1"
+    "@sap/cds": "10.0.5",
+    "@sap/cds-dk": "10.0.5",
+    "express": "5.2.1"
   },
   "scripts": {
     "start": "cds-serve",
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-type-sanitized/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-type-sanitized/package.json
index 0d0f1757a..3035866a3 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-type-sanitized/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-type-sanitized/package.json
@@ -3,9 +3,9 @@
     "version": "1.0.0",
     "dependencies": {
         "@cap-js/sqlite": "*",
-        "@sap/cds": "^7.9.5",
-        "@sap/cds-dk": "^8.6.1",
-        "express": "^4.17.1"
+        "@sap/cds": "10.0.5",
+        "@sap/cds-dk": "10.0.5",
+        "express": "5.2.1"
     },
     "scripts": {
         "start": "cds-serve",
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-complete-protocol-none/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-complete-protocol-none/package.json
index 6e66d859d..72f7d7589 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-complete-protocol-none/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-complete-protocol-none/package.json
@@ -2,8 +2,9 @@
     "name": "@advanced-security/log-injection",
     "version": "1.0.0",
     "dependencies": {
-        "@sap/cds": "^7",
-        "express": "^4.17.1",
+        "@sap/cds": "10.0.5",
+        "@sap/cds-dk": "10.0.5",
+        "express": "5.2.1",
         "@cap-js/sqlite": "*"
     },
     "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/package.json
index 6e66d859d..72f7d7589 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/package.json
@@ -2,8 +2,9 @@
     "name": "@advanced-security/log-injection",
     "version": "1.0.0",
     "dependencies": {
-        "@sap/cds": "^7",
-        "express": "^4.17.1",
+        "@sap/cds": "10.0.5",
+        "@sap/cds-dk": "10.0.5",
+        "express": "5.2.1",
         "@cap-js/sqlite": "*"
     },
     "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/package.json
index 6e66d859d..72f7d7589 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/package.json
@@ -2,8 +2,9 @@
     "name": "@advanced-security/log-injection",
     "version": "1.0.0",
     "dependencies": {
-        "@sap/cds": "^7",
-        "express": "^4.17.1",
+        "@sap/cds": "10.0.5",
+        "@sap/cds-dk": "10.0.5",
+        "express": "5.2.1",
         "@cap-js/sqlite": "*"
     },
     "scripts": {
diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/package.json b/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/package.json
index 6e66d859d..72f7d7589 100644
--- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/package.json
+++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/package.json
@@ -2,8 +2,9 @@
     "name": "@advanced-security/log-injection",
     "version": "1.0.0",
     "dependencies": {
-        "@sap/cds": "^7",
-        "express": "^4.17.1",
+        "@sap/cds": "10.0.5",
+        "@sap/cds-dk": "10.0.5",
+        "express": "5.2.1",
         "@cap-js/sqlite": "*"
     },
     "scripts": {