diff --git a/package-lock.json b/package-lock.json
index 14b418d1..d8819be7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -12,7 +12,7 @@
 				"intersection-observer": "^0.12.2",
 				"js-cookie": "^3.0.5",
 				"newspack-components": "^3.0.0",
-				"qs": "^6.12.1"
+				"qs": "^6.13.0"
 			},
 			"devDependencies": {
 				"@rushstack/eslint-patch": "^1.10.3",
@@ -23743,9 +23743,9 @@
 			}
 		},
 		"node_modules/qs": {
-			"version": "6.12.1",
-			"resolved": "https://registry.npmjs.org/qs/-/qs-6.12.1.tgz",
-			"integrity": "sha512-zWmv4RSuB9r2mYQw3zxQuHWeU+42aKi1wWig/j4ele4ygELZ7PEO6MM7rim9oAQH2A5MWfsAVf/jPvTPgCbvUQ==",
+			"version": "6.13.0",
+			"resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
+			"integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
 			"dependencies": {
 				"side-channel": "^1.0.6"
 			},
diff --git a/package.json b/package.json
index c8b81194..182d6f9e 100644
--- a/package.json
+++ b/package.json
@@ -35,7 +35,7 @@
 		"intersection-observer": "^0.12.2",
 		"js-cookie": "^3.0.5",
 		"newspack-components": "^3.0.0",
-		"qs": "^6.12.1"
+		"qs": "^6.13.0"
 	},
 	"devDependencies": {
 		"@rushstack/eslint-patch": "^1.10.3",