diff --git a/package-lock.json b/package-lock.json
index fbead25..e5bc320 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8828,7 +8828,7 @@
     },
     "node_modules/@clack/prompts/node_modules/is-unicode-supported": {
       "version": "1.3.0",
-      "extraneous": true,
+      "dev": true,
       "inBundle": true,
       "license": "MIT",
       "engines": {
@@ -18216,9 +18216,9 @@
       "license": "MIT"
     },
     "node_modules/csv-parse": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/csv-parse/-/csv-parse-5.6.0.tgz",
-      "integrity": "sha512-l3nz3euub2QMg5ouu5U09Ew9Wf6/wQ8I++ch1loQ0ljmzhmfZYrH9fflS22i/PQEvsPvxCwxgz5q7UB8K1JO4Q==",
+      "version": "6.1.0",
+      "resolved": "https://registry.npmjs.org/csv-parse/-/csv-parse-6.1.0.tgz",
+      "integrity": "sha512-CEE+jwpgLn+MmtCpVcPtiCZpVtB6Z2OKPTr34pycYYoL7sxdOkXDdQ4lRiw6ioC0q6BLqhc6cKweCVvral8yhw==",
       "license": "MIT"
     },
     "node_modules/culvert": {
@@ -34179,7 +34179,7 @@
       "version": "0.0.1",
       "dependencies": {
         "@nhsdigital/nhs-notify-client-config-schemas": "*",
-        "csv-parse": "^5.6.0",
+        "csv-parse": "^6.1.0",
         "zod": "^4.0.17"
       },
       "devDependencies": {
diff --git a/packages/event-builder/package.json b/packages/event-builder/package.json
index e76a854..47b1005 100644
--- a/packages/event-builder/package.json
+++ b/packages/event-builder/package.json
@@ -1,7 +1,7 @@
 {
   "dependencies": {
     "@nhsdigital/nhs-notify-client-config-schemas": "*",
-    "csv-parse": "^5.6.0",
+    "csv-parse": "^6.1.0",
     "zod": "^4.0.17"
   },
   "devDependencies": {