diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index e2e16f6be..f24040653 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -82,8 +82,8 @@ catalogs:
       specifier: 1.0.6
       version: 1.0.6
     '@socketregistry/packageurl-js':
-      specifier: 1.3.5
-      version: 1.3.5
+      specifier: 1.4.1
+      version: 1.4.1
     '@socketregistry/yocto-spinner':
       specifier: 1.0.25
       version: 1.0.25
@@ -277,7 +277,7 @@ overrides:
   isarray: npm:@socketregistry/isarray@^1.0.8
   lodash: 4.17.21
   npm-package-arg: 13.0.0
-  packageurl-js: npm:@socketregistry/packageurl-js@^1.3.5
+  packageurl-js: npm:@socketregistry/packageurl-js@^1.4.1
   path-parse: npm:@socketregistry/path-parse@^1.0.8
   qs: '>=6.15.0'
   safe-buffer: npm:@socketregistry/safe-buffer@^1.0.9
@@ -400,7 +400,7 @@ importers:
         version: 1.0.6
       '@socketregistry/packageurl-js':
         specifier: 'catalog:'
-        version: 1.3.5
+        version: 1.4.1
       '@socketregistry/yocto-spinner':
         specifier: 'catalog:'
         version: 1.0.25
@@ -637,7 +637,7 @@ importers:
         version: 1.0.6
       '@socketregistry/packageurl-js':
         specifier: 'catalog:'
-        version: 1.3.5
+        version: 1.4.1
       '@socketregistry/yocto-spinner':
         specifier: 'catalog:'
         version: 1.0.25
@@ -1978,6 +1978,10 @@ packages:
     resolution: {integrity: sha512-Fl4GNUJ/z3IBJBGj4IsJfuRGUBCRMgX0df0mb5x5buaCPDKC+NhMhAFuxpc3viLSHV12CO2rGaNCf4fBYWI0FA==}
     engines: {node: '>=18', pnpm: '>=10.16.0'}
 
+  '@socketregistry/packageurl-js@1.4.1':
+    resolution: {integrity: sha512-t/UrOd1DMYXcGuKo2v07WMbuHCMlKBKOriTHu4cn9OIxfj1qWKoF/kpOswGHOWkG5zwj2Ke/2+qLiDugmx5z+A==}
+    engines: {node: '>=18.20.4', pnpm: '>=10.25.0'}
+
   '@socketregistry/path-parse@1.0.8':
     resolution: {integrity: sha512-9dcT4Vj4TY6BsU7hd3sEemoaA8OEGUutK2ufNdP+qKOljcH0xy/5+WnbEZ1RLEJcSKDnpZ3T47mVdq/ZWiGNxw==}
     engines: {node: '>=18'}
@@ -5508,6 +5512,10 @@ snapshots:
 
   '@socketregistry/packageurl-js@1.3.5': {}
 
+  '@socketregistry/packageurl-js@1.4.1':
+    dependencies:
+      picomatch: 4.0.3
+
   '@socketregistry/path-parse@1.0.8': {}
 
   '@socketregistry/safe-buffer@1.0.9': {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index a7a3c4b6a..4b560f015 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -32,7 +32,7 @@ catalog:
   '@socketregistry/hyrious__bun.lockb': 1.0.19
   '@socketregistry/indent-string': 1.0.14
   '@socketregistry/is-interactive': 1.0.6
-  '@socketregistry/packageurl-js': 1.3.5
+  '@socketregistry/packageurl-js': 1.4.1
   '@socketregistry/yocto-spinner': 1.0.25
   '@socketsecurity/config': 3.0.1
   '@socketsecurity/lib': 5.11.4
@@ -107,7 +107,7 @@ catalog:
   open: 10.2.0
   oxfmt: 0.37.0
   oxlint: 1.52.0
-  packageurl-js: npm:@socketregistry/packageurl-js@^1.3.5
+  packageurl-js: npm:@socketregistry/packageurl-js@^1.4.1
   path-parse: npm:@socketregistry/path-parse@^1.0.8
   pony-cause: 2.1.11
   postject: 1.0.0-alpha.6