diff --git a/.github/workflows/cla.yml b/.github/workflows/cla.yml
index d6503ef..300bd53 100644
--- a/.github/workflows/cla.yml
+++ b/.github/workflows/cla.yml
@@ -29,7 +29,6 @@ jobs:
     with:
       project: linkunbound
       document-url: https://github.com/rgdevment/LinkUnbound/blob/main/CLA.md
-      allowlist: dependabot[bot],github-actions[bot]
       not-signed-message: >-
         Thanks for the pull request. LinkUnbound is released under the GPL-3.0 and offered under
         separate commercial terms, which requires a signature from whoever opened it and every
diff --git a/app/package-lock.json b/app/package-lock.json
index 2da9a8d..bae07af 100644
--- a/app/package-lock.json
+++ b/app/package-lock.json
@@ -5313,13 +5313,14 @@
       }
     },
     "node_modules/qs": {
-      "version": "6.15.1",
-      "resolved": "https://registry.npmjs.org/qs/-/qs-6.15.1.tgz",
-      "integrity": "sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==",
+      "version": "6.16.0",
+      "resolved": "https://registry.npmjs.org/qs/-/qs-6.16.0.tgz",
+      "integrity": "sha512-h6fhOIaRrID2CbEY2fqs+7t+UXZo+MLAnU5gRIq85uFtdiUPCdsApMlHhXogKVM4HM2DVbIjGNTTYH2OcmP1vA==",
       "dev": true,
       "license": "BSD-3-Clause",
       "dependencies": {
-        "side-channel": "^1.1.0"
+        "es-define-property": "^1.0.1",
+        "side-channel": "^1.1.1"
       },
       "engines": {
         "node": ">=0.6"
diff --git a/app/package.json b/app/package.json
index 85e9dee..db58d46 100644
--- a/app/package.json
+++ b/app/package.json
@@ -37,5 +37,8 @@
     "vite": "^8.3.2",
     "vitest": "^4.1.11"
   },
-  "license": "GPL-3.0-only"
+  "license": "GPL-3.0-only",
+  "overrides": {
+    "qs": "^6.16.0"
+  }
 }