diff --git a/packages/backend/package.json b/packages/backend/package.json
index 50a98a7c9a..ea8fe07fc5 100644
--- a/packages/backend/package.json
+++ b/packages/backend/package.json
@@ -87,7 +87,7 @@
 		"probe-image-size": "7.2.3",
 		"promise-limit": "2.7.0",
 		"punycode": "2.3.1",
-		"qrcode": "1.5.3",
+		"qrcode": "1.5.4",
 		"qs": "6.13.0",
 		"ratelimiter": "3.4.1",
 		"redis-semaphore": "5.6.0",
diff --git a/packages/client/package.json b/packages/client/package.json
index b1a9d1a2d8..b13a65de72 100644
--- a/packages/client/package.json
+++ b/packages/client/package.json
@@ -68,7 +68,7 @@
 		"photoswipe": "5.4.4",
 		"prismjs": "1.29.0",
 		"punycode": "2.3.1",
-		"qrcode": "1.5.3",
+		"qrcode": "1.5.4",
 		"qrcode-vue3": "1.6.8",
 		"rollup": "4.20.0",
 		"s-age": "1.1.2",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 59acabd2b8..8db5f0d270 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -250,8 +250,8 @@ importers:
         specifier: 2.3.1
         version: 2.3.1
       qrcode:
-        specifier: 1.5.3
-        version: 1.5.3
+        specifier: 1.5.4
+        version: 1.5.4
       qs:
         specifier: 6.13.0
         version: 6.13.0
@@ -656,8 +656,8 @@ importers:
         specifier: 2.3.1
         version: 2.3.1
       qrcode:
-        specifier: 1.5.3
-        version: 1.5.3
+        specifier: 1.5.4
+        version: 1.5.4
       qrcode-vue3:
         specifier: 1.6.8
         version: 1.6.8
@@ -3770,9 +3770,6 @@ packages:
   emojilib@3.0.12:
     resolution: {integrity: sha512-b52zmWqBwv9juk6lKaTdYxRQSnpsnT58Sj/x6fE8fZWcsNd43gAPXUbtjLKJvVlPS9FFNCN6nB9Vh1xipnCzXw==}
 
-  encode-utf8@1.0.3:
-    resolution: {integrity: sha512-ucAnuBEhUK4boH2HjVYG5Q2mQyPorvv0u/ocS+zhdw0S8AlHYY+GOFhP1Gio5z4icpP2ivFSvhtFjQi8+T9ppw==}
-
   encodeurl@1.0.2:
     resolution: {integrity: sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==}
     engines: {node: '>= 0.8'}
@@ -5678,8 +5675,8 @@ packages:
   qrcode-vue3@1.6.8:
     resolution: {integrity: sha512-LtMnwKWi58ZqHbXBcsTF/VxDYhI6RrBIrDQw8fbDVlO8p5tJBZa7TaIaVYLY937vKO2WCEBmOKksGlpm5ccEIg==}
 
-  qrcode@1.5.3:
-    resolution: {integrity: sha512-puyri6ApkEHYiVl4CFzo1tDkAZ+ATcnbJrJ6RiBM1Fhctdn/ix9MTE3hRph33omisEbC/2fcfemsseiKgBPKZg==}
+  qrcode@1.5.4:
+    resolution: {integrity: sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==}
     engines: {node: '>=10.13.0'}
     hasBin: true
 
@@ -9851,8 +9848,6 @@ snapshots:
 
   emojilib@3.0.12: {}
 
-  encode-utf8@1.0.3: {}
-
   encodeurl@1.0.2: {}
 
   end-of-stream@1.4.4:
@@ -12058,10 +12053,9 @@ snapshots:
     dependencies:
       qrcode-generator: 1.4.4
 
-  qrcode@1.5.3:
+  qrcode@1.5.4:
     dependencies:
       dijkstrajs: 1.0.3
-      encode-utf8: 1.0.3
       pngjs: 5.0.0
       yargs: 15.4.1