diff --git a/packages/web-app-unzip/package.json b/packages/web-app-unzip/package.json
index f45d89b2..2a9b9380 100644
--- a/packages/web-app-unzip/package.json
+++ b/packages/web-app-unzip/package.json
@@ -14,7 +14,7 @@
   "dependencies": {
     "@ownclouders/web-client": "^12.0.3",
     "@ownclouders/web-pkg": "^12.0.3",
-    "@zip.js/zip.js": "2.8.4"
+    "@zip.js/zip.js": "2.8.7"
   },
   "devDependencies": {
     "@ownclouders/extension-sdk": "^12.0.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index d1e2fbdd..224ecebe 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -234,8 +234,8 @@ importers:
         specifier: ^12.0.3
         version: 12.0.3(@vue/compiler-sfc@3.5.22)(typescript@5.9.3)(vue@3.5.22(typescript@5.9.3))
       '@zip.js/zip.js':
-        specifier: 2.8.4
-        version: 2.8.4
+        specifier: 2.8.7
+        version: 2.8.7
     devDependencies:
       '@ownclouders/extension-sdk':
         specifier: ^12.0.3
@@ -1538,8 +1538,8 @@ packages:
     peerDependencies:
       vue: ^3.5.0
 
-  '@zip.js/zip.js@2.8.4':
-    resolution: {integrity: sha512-DsayUNi6AAXKNahxu2mLSr8iecZYoBgsW0TuPcxwUv0jh3eTf1XI0OI1V1loCyxCyuwnLtwj92iCJ7oiQSt8ow==}
+  '@zip.js/zip.js@2.8.7':
+    resolution: {integrity: sha512-8daf29EMM3gUpH/vSBSCYo2bY/wbamgRPxPpE2b+cDnbOLBHAcZikWad79R4Guemth/qtipzEHrZMq1lFXxWIA==}
     engines: {bun: '>=0.7.0', deno: '>=1.0.0', node: '>=18.0.0'}
 
   abbrev@2.0.0:
@@ -5267,7 +5267,7 @@ snapshots:
     dependencies:
       vue: 3.5.22(typescript@5.9.3)
 
-  '@zip.js/zip.js@2.8.4': {}
+  '@zip.js/zip.js@2.8.7': {}
 
   abbrev@2.0.0: {}