diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index cf4d10c8e..77777d460 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -284,9 +284,9 @@ overrides:
   # lint themselves with the published config, so force the version this workspace uses.
   eslint-plugin-sonarjs@<4.2.0: ">=4.2.2"
   # GHSA-32gv-6cf3-8cmc
-  fast-uri@>=3.0.0 <3.1.3: "^4.2.1"
+  fast-uri@>=3.0.0 <3.1.3: "^4.2.2"
   # GHSA-7p8r-x3mc-p8w7 (host confusion via backslash)
-  fast-uri@>=4.0.0 <4.1.5: "^4.2.1"
+  fast-uri@>=4.0.0 <4.1.5: "^4.2.2"
 
   follow-redirects@<=1.15.11: ">=1.16.1"
   # GHSA-p3x2-7fjr-vqmv (path traversal)