diff --git a/apps/demos/package.json b/apps/demos/package.json
index 44b6bdcd504..047d9dcf140 100644
--- a/apps/demos/package.json
+++ b/apps/demos/package.json
@@ -128,7 +128,7 @@
         "prettier": "2.8.8",
         "rollup": "4.22.4",
         "serve-index": "1.9.1",
-        "serve-static": "1.16.0",
+        "serve-static": "1.16.2",
         "stylelint": "16.5.0",
         "stylelint-config-recommended-vue": "1.5.0",
         "stylelint-config-standard": "35.0.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6bd64ce4bdc..a1f2ec6e7fb 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -518,8 +518,8 @@ importers:
         specifier: 1.9.1
         version: 1.9.1
       serve-static:
-        specifier: 1.16.0
-        version: 1.16.0
+        specifier: 1.16.2
+        version: 1.16.2
       stylelint:
         specifier: 16.5.0
         version: 16.5.0(typescript@5.4.5)
@@ -14195,6 +14195,10 @@ packages:
     resolution: {integrity: sha512-pDLK8zwl2eKaYrs8mrPZBJua4hMplRWJ1tIFksVC3FtBEBnl8dxgeHtsaMS8DhS9i4fLObaon6ABoc4/hQGdPA==}
     engines: {node: '>= 0.8.0'}
 
+  serve-static@1.16.2:
+    resolution: {integrity: sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==}
+    engines: {node: '>= 0.8.0'}
+
   set-blocking@2.0.0:
     resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==}
 
@@ -33265,6 +33269,15 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  serve-static@1.16.2:
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 0.19.0
+    transitivePeerDependencies:
+      - supports-color
+
   set-blocking@2.0.0: {}
 
   set-cookie-parser@2.7.1: {}