diff --git a/package-lock.json b/package-lock.json
index 3090acad2e91..51ac96e34e53 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -122,7 +122,7 @@
         "eslint-plugin-primer-react": "^4.0.1",
         "eslint-plugin-promise": "6.1.1",
         "event-to-promise": "^0.8.0",
-        "graphql": "^16.5.0",
+        "graphql": "^16.8.1",
         "http-status-code": "^2.1.0",
         "husky": "^8.0.3",
         "jest": "29.7.0",
@@ -6848,9 +6848,10 @@
       "dev": true
     },
     "node_modules/graphql": {
-      "version": "16.5.0",
+      "version": "16.8.1",
+      "resolved": "https://registry.npmjs.org/graphql/-/graphql-16.8.1.tgz",
+      "integrity": "sha512-59LZHPdGZVh695Ud9lRzPBVTtlX9ZCV150Er2W43ro37wVof0ctenSaskPPjN7lVTIN8mSZt8PHUNKZuNQUuxw==",
       "dev": true,
-      "license": "MIT",
       "engines": {
         "node": "^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0"
       }
diff --git a/package.json b/package.json
index 0bbfbadf6c85..cb04048b1f19 100644
--- a/package.json
+++ b/package.json
@@ -171,7 +171,7 @@
     "eslint-plugin-primer-react": "^4.0.1",
     "eslint-plugin-promise": "6.1.1",
     "event-to-promise": "^0.8.0",
-    "graphql": "^16.5.0",
+    "graphql": "^16.8.1",
     "http-status-code": "^2.1.0",
     "husky": "^8.0.3",
     "jest": "29.7.0",