diff --git a/dstack/vmm/ui/package-lock.json b/dstack/vmm/ui/package-lock.json
index 40def9f69..b4534d10f 100644
--- a/dstack/vmm/ui/package-lock.json
+++ b/dstack/vmm/ui/package-lock.json
@@ -203,7 +203,9 @@
       "license": "MIT"
     },
     "node_modules/brace-expansion": {
-      "version": "2.0.2",
+      "version": "2.1.4",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-2.1.4.tgz",
+      "integrity": "sha512-hGfVzPxthbf3+2yjg/RBs60cB0FhqBS/zvdV/4wn4/BmN0bNMMHPc4V/BbFieqf1TKAGGAHnY4eSjajCl0f2Xg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {