diff --git a/apps/server/package.json b/apps/server/package.json
index 8396b8f1..309d23f5 100644
--- a/apps/server/package.json
+++ b/apps/server/package.json
@@ -39,7 +39,7 @@
     "@tus/s3-store": "^2.0.0",
     "@tus/server": "^2.3.0",
     "bullmq": "^5.56.9",
-    "diff": "^8.0.2",
+    "diff": "^8.0.3",
     "dotenv": "^17.2.1",
     "fastify": "^5.4.0",
     "fastify-type-provider-zod": "^5.0.3",
diff --git a/package-lock.json b/package-lock.json
index fe293600..451d4c75 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -90,7 +90,7 @@
         "@tus/s3-store": "^2.0.0",
         "@tus/server": "^2.3.0",
         "bullmq": "^5.56.9",
-        "diff": "^8.0.2",
+        "diff": "^8.0.3",
         "dotenv": "^17.2.1",
         "fastify": "^5.4.0",
         "fastify-type-provider-zod": "^5.0.3",
@@ -120,15 +120,6 @@
         "tsx": "^4.20.3"
       }
     },
-    "apps/server/node_modules/diff": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.2.tgz",
-      "integrity": "sha512-sSuxWU5j5SR9QQji/o2qMvqRNYRDOcBTgsJ/DeCf4iSN4gW+gNMXM7wFIP+fdXZxoNiAnHUTGjCr+TSWXdRDKg==",
-      "license": "BSD-3-Clause",
-      "engines": {
-        "node": ">=0.3.1"
-      }
-    },
     "apps/web": {
       "name": "@brainbox/web",
       "dependencies": {
@@ -14108,10 +14099,9 @@
       }
     },
     "node_modules/diff": {
-      "version": "4.0.2",
-      "resolved": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz",
-      "integrity": "sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==",
-      "dev": true,
+      "version": "8.0.3",
+      "resolved": "https://registry.npmjs.org/diff/-/diff-8.0.3.tgz",
+      "integrity": "sha512-qejHi7bcSD4hQAZE0tNAawRK1ZtafHDmMTMkrrIGgSLl7hTnQHmKCeB45xAcbfTqK2zowkM3j3bHt/4b/ARbYQ==",
       "license": "BSD-3-Clause",
       "engines": {
         "node": ">=0.3.1"
@@ -24913,6 +24903,16 @@
         }
       }
     },
+    "node_modules/ts-node/node_modules/diff": {
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz",
+      "integrity": "sha512-58lmxKSA4BNyLz+HHMUzlOEpg09FV+ev6ZMe3vJihgdxzgcwZ8VoEEPmALCZG9LmqfVoNMMKpttIYTVG6uDY7A==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.3.1"
+      }
+    },
     "node_modules/ts-pattern": {
       "version": "5.8.0",
       "resolved": "https://registry.npmjs.org/ts-pattern/-/ts-pattern-5.8.0.tgz",
@@ -27022,7 +27022,7 @@
       "version": "1.0.0",
       "dependencies": {
         "@brainbox/core": "^1.0.0",
-        "diff": "^8.0.2",
+        "diff": "^8.0.3",
         "js-base64": "^3.7.7",
         "yjs": "^13.6.27",
         "zod": "^4.0.15"
@@ -27031,13 +27031,6 @@
         "@types/diff": "^7.0.2"
       }
     },
-    "packages/crdt/node_modules/diff": {
-      "version": "8.0.2",
-      "license": "BSD-3-Clause",
-      "engines": {
-        "node": ">=0.3.1"
-      }
-    },
     "packages/ui": {
       "name": "@brainbox/ui",
       "version": "1.1.0",
diff --git a/packages/crdt/package.json b/packages/crdt/package.json
index ca7a2986..ed36c371 100644
--- a/packages/crdt/package.json
+++ b/packages/crdt/package.json
@@ -22,7 +22,7 @@
   },
   "dependencies": {
     "@brainbox/core": "^1.0.0",
-    "diff": "^8.0.2",
+    "diff": "^8.0.3",
     "js-base64": "^3.7.7",
     "yjs": "^13.6.27",
     "zod": "^4.0.15"