diff --git a/extractors/cds/tools/package-lock.json b/extractors/cds/tools/package-lock.json
index 573bc9c5a..0eba9e178 100644
--- a/extractors/cds/tools/package-lock.json
+++ b/extractors/cds/tools/package-lock.json
@@ -8,7 +8,7 @@
       "name": "@advanced-security/codeql-sap-js_index-cds-files",
       "version": "1.0.0",
       "dependencies": {
-        "@sap/cds-dk": "^8.9.0",
+        "@sap/cds-dk": "^8.9.1",
         "child_process": "^1.0.2",
         "fs": "^0.0.1-security",
         "os": "^0.1.2",
@@ -17,9 +17,9 @@
       }
     },
     "node_modules/@sap/cds-dk": {
-      "version": "8.9.0",
-      "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-8.9.0.tgz",
-      "integrity": "sha512-nhMc/QX8aUbhUtu47hyCsrP5U2I4jxXmgnUmMcn7lQriShYOsd0X5RqWIQwhMnzGVBa9Ia6aNYjQzcG6Su5xyg==",
+      "version": "8.9.1",
+      "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-8.9.1.tgz",
+      "integrity": "sha512-EMaEQWeJZMmLFeUeqN5I+uoPUyYrNCbm5LJTjrlfCLfsQxa9pIc9354zSGFAJHDK3pp1oVw7b+bAqswbVBXT+A==",
       "hasShrinkwrap": true,
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
@@ -57,7 +57,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@cap-js/db-service": {
-      "version": "1.18.0",
+      "version": "1.19.1",
       "license": "SEE LICENSE",
       "optional": true,
       "dependencies": {
@@ -78,11 +78,11 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@cap-js/sqlite": {
-      "version": "1.9.0",
+      "version": "1.10.0",
       "license": "SEE LICENSE",
       "optional": true,
       "dependencies": {
-        "@cap-js/db-service": "^1.18.0",
+        "@cap-js/db-service": "^1.19.0",
         "better-sqlite3": "^11.0.0"
       },
       "peerDependencies": {
@@ -135,7 +135,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@eslint/config-helpers": {
-      "version": "0.2.0",
+      "version": "0.2.1",
       "license": "Apache-2.0",
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -187,16 +187,26 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@eslint/plugin-kit": {
-      "version": "0.2.7",
+      "version": "0.2.8",
       "license": "Apache-2.0",
       "dependencies": {
-        "@eslint/core": "^0.12.0",
+        "@eslint/core": "^0.13.0",
         "levn": "^0.4.1"
       },
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
       }
     },
+    "node_modules/@sap/cds-dk/node_modules/@eslint/plugin-kit/node_modules/@eslint/core": {
+      "version": "0.13.0",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@types/json-schema": "^7.0.15"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
+      }
+    },
     "node_modules/@sap/cds-dk/node_modules/@humanfs/core": {
       "version": "0.19.1",
       "license": "Apache-2.0",
@@ -249,7 +259,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@sap/cds": {
-      "version": "8.9.0",
+      "version": "8.9.1",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@sap/cds-compiler": ">=5.1",
@@ -294,7 +304,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@sap/cds-fiori": {
-      "version": "1.4.0",
+      "version": "1.4.1",
       "license": "SEE LICENSE IN LICENSE",
       "peerDependencies": {
         "@sap/cds": ">=7.6",
diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/package-lock.json b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/package-lock.json
index b0f29dc40..f06bb1e9f 100644
--- a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/package-lock.json
+++ b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/package-lock.json
@@ -1174,13 +1174,13 @@
 			"dev": true
 		},
 		"node_modules/@types/node": {
-			"version": "22.13.16",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.13.16.tgz",
-			"integrity": "sha512-15tM+qA4Ypml/N7kyRdvfRjBQT2RL461uF1Bldn06K0Nzn1lY3nAPgHlsVrJxdZ9WhZiW0Fmc1lOYMtDsAuB3w==",
+			"version": "22.14.0",
+			"resolved": "https://registry.npmjs.org/@types/node/-/node-22.14.0.tgz",
+			"integrity": "sha512-Kmpl+z84ILoG+3T/zQFyAJsU6EPTmOCj8/2+83fSN6djd6I4o7uOuGIH6vq3PrjY5BGitSbFuMN18j3iknubbA==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
-				"undici-types": "~6.20.0"
+				"undici-types": "~6.21.0"
 			}
 		},
 		"node_modules/@types/normalize-package-data": {
@@ -9661,10 +9661,11 @@
 			"dev": true
 		},
 		"node_modules/cookies": {
-			"version": "0.8.0",
-			"resolved": "https://registry.npmjs.org/cookies/-/cookies-0.8.0.tgz",
-			"integrity": "sha512-8aPsApQfebXnuI+537McwYsDtjVxGm8gTIzQI3FDW6t5t/DAhERxtnbEPN/8RX+uZthoz4eCOgloXaE5cYyNow==",
+			"version": "0.9.1",
+			"resolved": "https://registry.npmjs.org/cookies/-/cookies-0.9.1.tgz",
+			"integrity": "sha512-TG2hpqe4ELx54QER/S3HQ9SRVnQnGBtKUz5bLQWtYAQ+o6GpgMs6sYUvaiJjVxb+UXwhRhAEP3m7LbsIZ77Hmw==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"depd": "~2.0.0",
 				"keygrip": "~1.1.0"
@@ -12077,6 +12078,7 @@
 			"resolved": "https://registry.npmjs.org/keygrip/-/keygrip-1.1.0.tgz",
 			"integrity": "sha512-iYSchDJ+liQ8iwbSI2QqsQOvqv58eJCEanyJPJi+Khyu8smkcKSFUCbPwzFcL7YVtZ6eONjqRX/38caJ7QjRAQ==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"tsscmp": "1.0.6"
 			},
@@ -12094,16 +12096,17 @@
 			}
 		},
 		"node_modules/koa": {
-			"version": "2.14.2",
-			"resolved": "https://registry.npmjs.org/koa/-/koa-2.14.2.tgz",
-			"integrity": "sha512-VFI2bpJaodz6P7x2uyLiX6RLYpZmOJqNmoCst/Yyd7hQlszyPwG/I9CQJ63nOtKSxpt5M7NH67V6nJL2BwCl7g==",
+			"version": "2.16.1",
+			"resolved": "https://registry.npmjs.org/koa/-/koa-2.16.1.tgz",
+			"integrity": "sha512-umfX9d3iuSxTQP4pnzLOz0HKnPg0FaUUIKcye2lOiz3KPu1Y3M3xlz76dISdFPQs37P9eJz1wUpcTS6KDPn9fA==",
 			"dev": true,
+			"license": "MIT",
 			"dependencies": {
 				"accepts": "^1.3.5",
 				"cache-content-type": "^1.0.0",
 				"content-disposition": "~0.5.2",
 				"content-type": "^1.0.4",
-				"cookies": "~0.8.0",
+				"cookies": "~0.9.0",
 				"debug": "^4.3.2",
 				"delegates": "^1.0.0",
 				"depd": "^2.0.0",
@@ -16192,6 +16195,7 @@
 			"resolved": "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.6.tgz",
 			"integrity": "sha512-LxhtAkPDTkVCMQjt2h6eBVY28KCjikZqZfMcC15YBeNjkgUpdCfBu5HoiOTDu86v6smE8yOjyEktJ8hlbANHQA==",
 			"dev": true,
+			"license": "MIT",
 			"engines": {
 				"node": ">=0.6.x"
 			}
@@ -16311,9 +16315,9 @@
 			"dev": true
 		},
 		"node_modules/undici-types": {
-			"version": "6.20.0",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.20.0.tgz",
-			"integrity": "sha512-Ny6QZ2Nju20vw1SRHe3d9jVu6gJ+4e3+MMpqu7pqE5HT6WsTSlce++GQmK5UXS8mzV8DSYHrQH+Xrf2jVcuKNg==",
+			"version": "6.21.0",
+			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-6.21.0.tgz",
+			"integrity": "sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==",
 			"dev": true,
 			"license": "MIT"
 		},