diff --git a/package-lock.json b/package-lock.json
index 5334ca723..f1d7da849 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -15388,6 +15388,7 @@
       "version": "3.1.1",
       "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-3.1.1.tgz",
       "integrity": "sha512-6fPc+R4ihwqP6N/aIv2f1gMH8lOVtWQHoqC4yK6oSDVVocumAsfCqjkXnqiYMhmMwS/mEHLp7Vehlt3ql6lEig==",
+      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=8"
@@ -18124,7 +18125,7 @@
         "@google/gemini-cli-core": "file:../core",
         "express": "^5.1.0",
         "fs-extra": "^11.3.0",
-        "strip-json-comments": "^3.1.1",
+        "strip-json-comments": "^5.0.3",
         "tar": "^7.5.8",
         "uuid": "^13.0.0",
         "winston": "^3.17.0"
@@ -18201,6 +18202,18 @@
         "url": "https://dotenvx.com"
       }
     },
+    "packages/a2a-server/node_modules/strip-json-comments": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-5.0.3.tgz",
+      "integrity": "sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "packages/a2a-server/node_modules/tar": {
       "version": "7.5.11",
       "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
@@ -18282,7 +18295,7 @@
         "simple-git": "^3.28.0",
         "string-width": "^8.1.0",
         "strip-ansi": "^7.1.0",
-        "strip-json-comments": "^3.1.1",
+        "strip-json-comments": "^5.0.3",
         "tar": "^7.5.8",
         "tinygradient": "^1.1.5",
         "undici": "^7.10.0",
@@ -18362,6 +18375,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "packages/cli/node_modules/strip-json-comments": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-5.0.3.tgz",
+      "integrity": "sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "packages/cli/node_modules/tar": {
       "version": "7.5.11",
       "resolved": "https://registry.npmjs.org/tar/-/tar-7.5.11.tgz",
@@ -18458,7 +18483,7 @@
         "shell-quote": "^1.8.3",
         "simple-git": "^3.28.0",
         "strip-ansi": "^7.1.0",
-        "strip-json-comments": "^3.1.1",
+        "strip-json-comments": "^5.0.3",
         "systeminformation": "^5.25.11",
         "tree-sitter-bash": "^0.25.0",
         "undici": "^7.10.0",
@@ -18645,6 +18670,18 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "packages/core/node_modules/strip-json-comments": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-5.0.3.tgz",
+      "integrity": "sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=14.16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "packages/core/node_modules/typescript": {
       "version": "5.9.3",
       "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
diff --git a/packages/a2a-server/package.json b/packages/a2a-server/package.json
index 611408caf..1cb0031a0 100644
--- a/packages/a2a-server/package.json
+++ b/packages/a2a-server/package.json
@@ -30,7 +30,7 @@
     "@google/gemini-cli-core": "file:../core",
     "express": "^5.1.0",
     "fs-extra": "^11.3.0",
-    "strip-json-comments": "^3.1.1",
+    "strip-json-comments": "^5.0.3",
     "tar": "^7.5.8",
     "uuid": "^13.0.0",
     "winston": "^3.17.0"
diff --git a/packages/cli/package.json b/packages/cli/package.json
index b5f10d66d..87b950d1a 100644
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -63,7 +63,7 @@
     "simple-git": "^3.28.0",
     "string-width": "^8.1.0",
     "strip-ansi": "^7.1.0",
-    "strip-json-comments": "^3.1.1",
+    "strip-json-comments": "^5.0.3",
     "tar": "^7.5.8",
     "tinygradient": "^1.1.5",
     "undici": "^7.10.0",
diff --git a/packages/core/package.json b/packages/core/package.json
index 14d0525d8..34a3060fd 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -84,7 +84,7 @@
     "shell-quote": "^1.8.3",
     "simple-git": "^3.28.0",
     "strip-ansi": "^7.1.0",
-    "strip-json-comments": "^3.1.1",
+    "strip-json-comments": "^5.0.3",
     "systeminformation": "^5.25.11",
     "tree-sitter-bash": "^0.25.0",
     "undici": "^7.10.0",