diff --git a/package.json b/package.json
index ad63f13b..3cb01a56 100644
--- a/package.json
+++ b/package.json
@@ -54,7 +54,7 @@
     "@sigstore/tuf": "^5.0.0",
     "@sigstore/verify": "^4.1.0",
     "async-retry": "^1.3.3",
-    "csv-parse": "^7.0.1",
+    "csv-parse": "^7.0.2",
     "gunzip-maybe": "^1.4.2",
     "handlebars": "^4.7.9",
     "he": "^1.2.0",
diff --git a/yarn.lock b/yarn.lock
index 7b7785af..c176b848 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -483,7 +483,7 @@ __metadata:
     "@vitest/coverage-v8": "npm:^4.0.18"
     "@vitest/eslint-plugin": "npm:^1.6.9"
     async-retry: "npm:^1.3.3"
-    csv-parse: "npm:^7.0.1"
+    csv-parse: "npm:^7.0.2"
     eslint: "npm:^9.39.3"
     eslint-config-prettier: "npm:^10.1.8"
     eslint-plugin-prettier: "npm:^5.5.5"
@@ -2296,10 +2296,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"csv-parse@npm:^7.0.1":
-  version: 7.0.1
-  resolution: "csv-parse@npm:7.0.1"
-  checksum: 10/5c914f01181dbb381068b98e17b49361d853faa95db3e8e82bc96b6a0de5313ecc8325a77db35ff66644d7747099965ba3167ec21bd9ce4500edf21b5bdd49bf
+"csv-parse@npm:^7.0.2":
+  version: 7.0.2
+  resolution: "csv-parse@npm:7.0.2"
+  checksum: 10/66158491d25b2070908c6d28130c1d439bec0e0d1ab3fad372973909e573bcc85a46ca317ae410f0178157f272112e3741b164aaf850d8241128c30ea2137670
   languageName: node
   linkType: hard