diff --git a/packages/web-app-unzip/package.json b/packages/web-app-unzip/package.json
index 1d5bb47d..f6ef1969 100644
--- a/packages/web-app-unzip/package.json
+++ b/packages/web-app-unzip/package.json
@@ -14,7 +14,7 @@
   "dependencies": {
     "@ownclouders/web-client": "^12.3.0",
     "@ownclouders/web-pkg": "^12.3.0",
-    "@zip.js/zip.js": "2.8.13"
+    "@zip.js/zip.js": "2.8.26"
   },
   "devDependencies": {
     "@ownclouders/extension-sdk": "^12.3.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9a569e2e..65a25c8e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -297,8 +297,8 @@ importers:
         specifier: ^12.3.0
         version: 12.3.1(@vue/compiler-sfc@3.5.22)(typescript@5.9.3)(vue@3.5.22(typescript@5.9.3))
       '@zip.js/zip.js':
-        specifier: 2.8.13
-        version: 2.8.13
+        specifier: 2.8.26
+        version: 2.8.26
     devDependencies:
       '@ownclouders/extension-sdk':
         specifier: ^12.3.0
@@ -1628,8 +1628,8 @@ packages:
     peerDependencies:
       vue: ^3.5.0
 
-  '@zip.js/zip.js@2.8.13':
-    resolution: {integrity: sha512-UcWZ5i9Hlspgo+8q8PUPd9TmDYM62eqfb/0iZ5SF3bqfX/uFUmV660MC9Lsvon7/sidzesXLQlIf8/mbDUf6gQ==}
+  '@zip.js/zip.js@2.8.26':
+    resolution: {integrity: sha512-RQ4h9F6DOiHxpdocUDrOl6xBM+yOtz+LkUol47AVWcfebGBDpZ7w7Xvz9PS24JgXvLGiXXzSAfdCdVy1tPlaFA==}
     engines: {bun: '>=0.7.0', deno: '>=1.0.0', node: '>=18.0.0'}
 
   abbrev@2.0.0:
@@ -5495,7 +5495,7 @@ snapshots:
     dependencies:
       vue: 3.5.22(typescript@5.9.3)
 
-  '@zip.js/zip.js@2.8.13': {}
+  '@zip.js/zip.js@2.8.26': {}
 
   abbrev@2.0.0: {}