diff --git a/package-lock.json b/package-lock.json
index ddb6be36439da..079b7f1e47611 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -21,7 +21,7 @@
         "chalk": "^5.2.0",
         "check-node-version": "^4.2.1",
         "cloudflare-middleware": "^1.0.4",
-        "config": "^3.3.8",
+        "config": "^3.3.9",
         "cross-env": "^7.0.3",
         "dayjs": "^1.11.7",
         "decamelize": "^3.2.0",
@@ -9374,11 +9374,11 @@
       }
     },
     "node_modules/config": {
-      "version": "3.3.8",
-      "resolved": "https://registry.npmjs.org/config/-/config-3.3.8.tgz",
-      "integrity": "sha512-rFzF6VESOdp7wAXFlB9IOZI4ouL05g3A03v2eRcTHj2JBQaTNJ40zhAUl5wRbWHqLZ+uqp/7OE0BWWtAVgrong==",
+      "version": "3.3.9",
+      "resolved": "https://registry.npmjs.org/config/-/config-3.3.9.tgz",
+      "integrity": "sha512-G17nfe+cY7kR0wVpc49NCYvNtelm/pPy8czHoFkAgtV1lkmcp7DHtWCdDu+C9Z7gb2WVqa9Tm3uF9aKaPbCfhg==",
       "dependencies": {
-        "json5": "^2.2.1"
+        "json5": "^2.2.3"
       },
       "engines": {
         "node": ">= 10.0.0"
@@ -37104,11 +37104,11 @@
       }
     },
     "config": {
-      "version": "3.3.8",
-      "resolved": "https://registry.npmjs.org/config/-/config-3.3.8.tgz",
-      "integrity": "sha512-rFzF6VESOdp7wAXFlB9IOZI4ouL05g3A03v2eRcTHj2JBQaTNJ40zhAUl5wRbWHqLZ+uqp/7OE0BWWtAVgrong==",
+      "version": "3.3.9",
+      "resolved": "https://registry.npmjs.org/config/-/config-3.3.9.tgz",
+      "integrity": "sha512-G17nfe+cY7kR0wVpc49NCYvNtelm/pPy8czHoFkAgtV1lkmcp7DHtWCdDu+C9Z7gb2WVqa9Tm3uF9aKaPbCfhg==",
       "requires": {
-        "json5": "^2.2.1"
+        "json5": "^2.2.3"
       },
       "dependencies": {
         "json5": {
diff --git a/package.json b/package.json
index 38cb369514015..0ec00100eedbb 100644
--- a/package.json
+++ b/package.json
@@ -33,7 +33,7 @@
     "chalk": "^5.2.0",
     "check-node-version": "^4.2.1",
     "cloudflare-middleware": "^1.0.4",
-    "config": "^3.3.8",
+    "config": "^3.3.9",
     "cross-env": "^7.0.3",
     "dayjs": "^1.11.7",
     "decamelize": "^3.2.0",