diff --git a/package-lock.json b/package-lock.json
index 5a879ab7..96db5a96 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -18733,9 +18733,9 @@
       }
     },
     "node_modules/simple-statistics": {
-      "version": "7.8.5",
-      "resolved": "https://registry.npmjs.org/simple-statistics/-/simple-statistics-7.8.5.tgz",
-      "integrity": "sha512-yw4aOnkvPLbL80zamrEKznAnk5cIIkjEcx/z0aQl+m/YKMmVufrnWgWJWRspqZtwh+ElZXRhJ0MtnUjFUQV5Ow==",
+      "version": "7.8.7",
+      "resolved": "https://registry.npmjs.org/simple-statistics/-/simple-statistics-7.8.7.tgz",
+      "integrity": "sha512-ed5FwTNYvkMTfbCai1U+r3symP+lIPKWCqKdudpN4NFNMn9RtDlFtSyAQhCp4oPH0YBjWu/qnW+5q5ZkPB3uHQ==",
       "engines": {
         "node": "*"
       }
@@ -20966,7 +20966,7 @@
         "murmurhash": "^2.0.1",
         "ngeohash": "^0.6.3",
         "proj4": "^2.12.1",
-        "simple-statistics": "^7.8.5",
+        "simple-statistics": "^7.8.7",
         "wkt-parser": "^1.3.3"
       },
       "devDependencies": {
@@ -23177,7 +23177,7 @@
         "ngeohash": "^0.6.3",
         "proj4": "^2.12.1",
         "proxyquire": "^2.1.3",
-        "simple-statistics": "^7.8.5",
+        "simple-statistics": "^7.8.7",
         "sinon": "^18.0.0",
         "tap-min": "^3.0.0",
         "tape": "^5.9.0",
@@ -34421,9 +34421,9 @@
       }
     },
     "simple-statistics": {
-      "version": "7.8.5",
-      "resolved": "https://registry.npmjs.org/simple-statistics/-/simple-statistics-7.8.5.tgz",
-      "integrity": "sha512-yw4aOnkvPLbL80zamrEKznAnk5cIIkjEcx/z0aQl+m/YKMmVufrnWgWJWRspqZtwh+ElZXRhJ0MtnUjFUQV5Ow=="
+      "version": "7.8.7",
+      "resolved": "https://registry.npmjs.org/simple-statistics/-/simple-statistics-7.8.7.tgz",
+      "integrity": "sha512-ed5FwTNYvkMTfbCai1U+r3symP+lIPKWCqKdudpN4NFNMn9RtDlFtSyAQhCp4oPH0YBjWu/qnW+5q5ZkPB3uHQ=="
     },
     "simple-swizzle": {
       "version": "0.2.2",
diff --git a/packages/winnow/package.json b/packages/winnow/package.json
index a0317e66..b2c8e717 100644
--- a/packages/winnow/package.json
+++ b/packages/winnow/package.json
@@ -65,7 +65,7 @@
     "murmurhash": "^2.0.1",
     "ngeohash": "^0.6.3",
     "proj4": "^2.12.1",
-    "simple-statistics": "^7.8.5",
+    "simple-statistics": "^7.8.7",
     "wkt-parser": "^1.3.3"
   },
   "devDependencies": {