diff --git a/benchmark/package.json b/benchmark/package.json
index 164f91ec9c3f..1d8d7b4c9361 100644
--- a/benchmark/package.json
+++ b/benchmark/package.json
@@ -46,7 +46,7 @@
     "@types/debug": "^4.1.13",
     "@types/request-promise-native": "^1.0.21",
     "autocannon": "^8.0.0",
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "benchmark": "^2.1.4",
     "byline": "^5.0.0",
     "debug": "^4.4.3",
diff --git a/examples/passport-login/package.json b/examples/passport-login/package.json
index 0c491ebf1678..794d487db51d 100644
--- a/examples/passport-login/package.json
+++ b/examples/passport-login/package.json
@@ -94,7 +94,7 @@
     "@types/express": "^4.17.25",
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.43",
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "eslint": "^8.57.1",
     "lodash": "^4.18.1",
     "typescript": "~5.2.2"
diff --git a/extensions/authentication-passport/package.json b/extensions/authentication-passport/package.json
index c6aaa5e33b02..25db1f359864 100644
--- a/extensions/authentication-passport/package.json
+++ b/extensions/authentication-passport/package.json
@@ -66,7 +66,7 @@
     "@types/passport-http": "^0.3.11",
     "@types/passport-oauth2": "^1.8.0",
     "@types/qs": "^6.15.1",
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "body-parser": "^2.3.0",
     "express": "^4.22.2",
     "form-data": "^4.0.6",
diff --git a/fixtures/mock-oauth2-provider/package.json b/fixtures/mock-oauth2-provider/package.json
index 7c970e52449f..7cf5a4870cb4 100644
--- a/fixtures/mock-oauth2-provider/package.json
+++ b/fixtures/mock-oauth2-provider/package.json
@@ -40,7 +40,7 @@
     "@types/jsonwebtoken": "^9.0.10",
     "@types/lodash": "^4.17.24",
     "@types/node": "^20.19.43",
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "body-parser": "^2.3.0",
     "express": "^4.22.2",
     "form-data": "^4.0.6",
diff --git a/package-lock.json b/package-lock.json
index 2f39156c648f..ea4af724e535 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -243,7 +243,7 @@
         "@types/debug": "^4.1.13",
         "@types/request-promise-native": "^1.0.21",
         "autocannon": "^8.0.0",
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "benchmark": "^2.1.4",
         "byline": "^5.0.0",
         "debug": "^4.4.3",
@@ -958,7 +958,7 @@
         "@types/express": "^4.17.25",
         "@types/lodash": "^4.17.24",
         "@types/node": "^20.19.43",
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "eslint": "^8.57.1",
         "lodash": "^4.18.1",
         "typescript": "~5.2.2"
@@ -1559,7 +1559,7 @@
         "@types/passport-http": "^0.3.11",
         "@types/passport-oauth2": "^1.8.0",
         "@types/qs": "^6.15.1",
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "body-parser": "^2.3.0",
         "express": "^4.22.2",
         "form-data": "^4.0.6",
@@ -2044,7 +2044,7 @@
         "@types/jsonwebtoken": "^9.0.10",
         "@types/lodash": "^4.17.24",
         "@types/node": "^20.19.43",
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "body-parser": "^2.3.0",
         "express": "^4.22.2",
         "form-data": "^4.0.6",
@@ -10917,25 +10917,17 @@
       "integrity": "sha512-NmWvPnx0F1SfrQbYwOi7OeaNGokp9XhzNioJ/CSBs8Qa4vxug81mhJEAVZwxXuBmYB5KDRfMq/F3RR0BIU7sWg=="
     },
     "node_modules/axios": {
-      "version": "1.16.0",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
-      "integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
+      "version": "1.18.1",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.18.1.tgz",
+      "integrity": "sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.16.0",
         "form-data": "^4.0.5",
+        "https-proxy-agent": "^5.0.1",
         "proxy-from-env": "^2.1.0"
       }
     },
-    "node_modules/axios/node_modules/proxy-from-env": {
-      "version": "2.1.0",
-      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
-      "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=10"
-      }
-    },
     "node_modules/b4a": {
       "version": "1.6.4",
       "resolved": "https://registry.npmjs.org/b4a/-/b4a-1.6.4.tgz",
@@ -30000,6 +29992,15 @@
         "node": ">= 0.10"
       }
     },
+    "node_modules/proxy-from-env": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/proxy-from-env/-/proxy-from-env-2.1.0.tgz",
+      "integrity": "sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/psl": {
       "version": "1.9.0",
       "resolved": "https://registry.npmjs.org/psl/-/psl-1.9.0.tgz",
@@ -40584,7 +40585,7 @@
       "version": "7.0.14",
       "license": "MIT",
       "dependencies": {
-        "axios": "^1.16.0",
+        "axios": "^1.18.1",
         "cacache": "^21.0.1",
         "debug": "^4.4.3",
         "rimraf": "^5.0.10",
diff --git a/packages/http-caching-proxy/package.json b/packages/http-caching-proxy/package.json
index 9f659f96ad26..13c22ffde132 100644
--- a/packages/http-caching-proxy/package.json
+++ b/packages/http-caching-proxy/package.json
@@ -39,7 +39,7 @@
     "!*/__tests__"
   ],
   "dependencies": {
-    "axios": "^1.16.0",
+    "axios": "^1.18.1",
     "cacache": "^21.0.1",
     "debug": "^4.4.3",
     "rimraf": "^5.0.10",