diff --git a/package-lock.json b/package-lock.json
index 109f2a25..aa235eee 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "dependencies": {
         "@modelcontextprotocol/sdk": "^1.26.0",
         "decimal.js": "^10.4.3",
-        "zod": "^3.25.0 || ^4.0.0"
+        "zod": "^3.25.49"
       },
       "bin": {
         "mcp": "bin/mcp-server.js"
@@ -3566,9 +3566,9 @@
       }
     },
     "node_modules/zod": {
-      "version": "3.25.49",
-      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.49.tgz",
-      "integrity": "sha512-JMMPMy9ZBk3XFEdbM3iL1brx4NUSejd6xr3ELrrGEfGb355gjhiAWtG3K5o+AViV/3ZfkIrCzXsZn6SbLwTR8Q==",
+      "version": "3.25.76",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-3.25.76.tgz",
+      "integrity": "sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==",
       "license": "MIT",
       "funding": {
         "url": "https://github.com/sponsors/colinhacks"
diff --git a/package.json b/package.json
index 44d88a41..8d253f54 100644
--- a/package.json
+++ b/package.json
@@ -35,6 +35,6 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.26.0",
     "decimal.js": "^10.4.3",
-    "zod": "^3.25.0 || ^4.0.0"
+    "zod": "^3.25.49"
   }
 }