diff --git a/packages/config/package.json b/packages/config/package.json
index 40ac20e87a0..dbedefb9722 100644
--- a/packages/config/package.json
+++ b/packages/config/package.json
@@ -66,7 +66,7 @@
     "json5": "^2.2.3",
     "pathe": "^1.1.2",
     "semver": "^7.6.3",
-    "winston": "^3.15.0"
+    "winston": "^3.17.0"
   },
   "devDependencies": {
     "@alcalzone/esm2cjs": "^1.4.1",
diff --git a/packages/core/package.json b/packages/core/package.json
index 8a122a5a3e1..e4cd9312eb4 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -129,7 +129,7 @@
     "reflect-metadata": "^0.2.2",
     "semver": "^7.6.3",
     "triple-beam": "*",
-    "winston": "^3.15.0",
+    "winston": "^3.17.0",
     "winston-daily-rotate-file": "^5.0.0",
     "winston-transport": "^4.8.0"
   },
diff --git a/packages/serial/package.json b/packages/serial/package.json
index 6a6a68eec02..aded25cbac9 100644
--- a/packages/serial/package.json
+++ b/packages/serial/package.json
@@ -76,7 +76,7 @@
     "@zwave-js/shared": "workspace:*",
     "alcalzone-shared": "^5.0.0",
     "serialport": "^12.0.0",
-    "winston": "^3.15.0"
+    "winston": "^3.17.0"
   },
   "devDependencies": {
     "@alcalzone/esm2cjs": "^1.4.1",
diff --git a/packages/zwave-js/package.json b/packages/zwave-js/package.json
index 8673a0216cd..9b9aa14ddc7 100644
--- a/packages/zwave-js/package.json
+++ b/packages/zwave-js/package.json
@@ -120,7 +120,7 @@
     "semver": "^7.6.3",
     "serialport": "^12.0.0",
     "source-map-support": "^0.5.21",
-    "winston": "^3.15.0"
+    "winston": "^3.17.0"
   },
   "devDependencies": {
     "@alcalzone/esm2cjs": "^1.4.1",
diff --git a/yarn.lock b/yarn.lock
index d07bef48074..8063de12f42 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -2568,7 +2568,7 @@ __metadata:
     tsx: "npm:^4.19.2"
     typescript: "npm:5.6.2"
     vitest: "npm:^2.1.4"
-    winston: "npm:^3.15.0"
+    winston: "npm:^3.17.0"
     xml2js: "npm:^0.6.2"
     yargs: "npm:^17.7.2"
   languageName: unknown
@@ -2601,7 +2601,7 @@ __metadata:
     tsx: "npm:^4.19.2"
     typescript: "npm:5.6.2"
     vitest: "npm:^2.1.4"
-    winston: "npm:^3.15.0"
+    winston: "npm:^3.17.0"
     winston-daily-rotate-file: "npm:^5.0.0"
     winston-transport: "npm:^4.8.0"
   languageName: unknown
@@ -2816,7 +2816,7 @@ __metadata:
     tsx: "npm:^4.19.2"
     typescript: "npm:5.6.2"
     vitest: "npm:^2.1.4"
-    winston: "npm:^3.15.0"
+    winston: "npm:^3.17.0"
   languageName: unknown
   linkType: soft
 
@@ -6691,9 +6691,9 @@ __metadata:
   languageName: node
   linkType: hard
 
-"logform@npm:^2.6.0":
-  version: 2.6.0
-  resolution: "logform@npm:2.6.0"
+"logform@npm:^2.6.1":
+  version: 2.6.1
+  resolution: "logform@npm:2.6.1"
   dependencies:
     "@colors/colors": "npm:1.6.0"
     "@types/triple-beam": "npm:^1.3.2"
@@ -6701,13 +6701,13 @@ __metadata:
     ms: "npm:^2.1.1"
     safe-stable-stringify: "npm:^2.3.1"
     triple-beam: "npm:^1.3.0"
-  checksum: 10/92de5696a529a7ccf4359fe65a21fce2398ba20c4b4e5769cba187b8fde01d590a22d3c83f797d31b436f49770fb1b2f28646e7c881d30b8d1f4080a05ae7006
+  checksum: 10/e67f414787fbfe1e6a997f4c84300c7e06bee3d0bd579778af667e24b36db3ea200ed195d41b61311ff738dab7faabc615a07b174b22fe69e0b2f39e985be64b
   languageName: node
   linkType: hard
 
-"logform@npm:^2.6.1":
-  version: 2.6.1
-  resolution: "logform@npm:2.6.1"
+"logform@npm:^2.7.0":
+  version: 2.7.0
+  resolution: "logform@npm:2.7.0"
   dependencies:
     "@colors/colors": "npm:1.6.0"
     "@types/triple-beam": "npm:^1.3.2"
@@ -6715,7 +6715,7 @@ __metadata:
     ms: "npm:^2.1.1"
     safe-stable-stringify: "npm:^2.3.1"
     triple-beam: "npm:^1.3.0"
-  checksum: 10/e67f414787fbfe1e6a997f4c84300c7e06bee3d0bd579778af667e24b36db3ea200ed195d41b61311ff738dab7faabc615a07b174b22fe69e0b2f39e985be64b
+  checksum: 10/4b861bfd67efe599ab41113ae3ffe92b1873bf86793fb442f58971852430d8f416f9904da69e5043071fb3725690e2499a13acbfe92a57ba7d21690004f9edc0
   languageName: node
   linkType: hard
 
@@ -7886,6 +7886,17 @@ __metadata:
   languageName: node
   linkType: hard
 
+"readable-stream@npm:^3.6.2":
+  version: 3.6.2
+  resolution: "readable-stream@npm:3.6.2"
+  dependencies:
+    inherits: "npm:^2.0.3"
+    string_decoder: "npm:^1.1.1"
+    util-deprecate: "npm:^1.0.1"
+  checksum: 10/d9e3e53193adcdb79d8f10f2a1f6989bd4389f5936c6f8b870e77570853561c362bee69feca2bbb7b32368ce96a85504aa4cedf7cf80f36e6a9de30d64244048
+  languageName: node
+  linkType: hard
+
 "readable-stream@npm:^4.5.2":
   version: 4.5.2
   resolution: "readable-stream@npm:4.5.2"
@@ -9681,22 +9692,33 @@ __metadata:
   languageName: node
   linkType: hard
 
-"winston@npm:^3.15.0":
-  version: 3.15.0
-  resolution: "winston@npm:3.15.0"
+"winston-transport@npm:^4.9.0":
+  version: 4.9.0
+  resolution: "winston-transport@npm:4.9.0"
+  dependencies:
+    logform: "npm:^2.7.0"
+    readable-stream: "npm:^3.6.2"
+    triple-beam: "npm:^1.3.0"
+  checksum: 10/5946918720baadd7447823929e94cf0935f92c4cff6d9451c6fcb009bd9d20a3b3df9ad606109e79d1e9f4d2ff678477bf09f81cfefce2025baaf27a617129bb
+  languageName: node
+  linkType: hard
+
+"winston@npm:^3.17.0":
+  version: 3.17.0
+  resolution: "winston@npm:3.17.0"
   dependencies:
     "@colors/colors": "npm:^1.6.0"
     "@dabh/diagnostics": "npm:^2.0.2"
     async: "npm:^3.2.3"
     is-stream: "npm:^2.0.0"
-    logform: "npm:^2.6.0"
+    logform: "npm:^2.7.0"
     one-time: "npm:^1.0.0"
     readable-stream: "npm:^3.4.0"
     safe-stable-stringify: "npm:^2.3.1"
     stack-trace: "npm:0.0.x"
     triple-beam: "npm:^1.3.0"
-    winston-transport: "npm:^4.7.0"
-  checksum: 10/60e55eb3621e4de1a764a4e43ee1d242c71957d3e0eb359cb8f16fe2b9d9543fd4c31a8d3baf96fa7e43ef5df383c43c1a98aff4bd714ea0082303504b0e3cdc
+    winston-transport: "npm:^4.9.0"
+  checksum: 10/220309a0ead36c1171158ab28cb9133f8597fba19c8c1c190df9329555530565b58f3af0037c1b80e0c49f7f9b6b3b01791d0c56536eb0be38678d36e316c2a3
   languageName: node
   linkType: hard
 
@@ -9938,7 +9960,7 @@ __metadata:
     tsx: "npm:^4.19.2"
     typescript: "npm:5.6.2"
     vitest: "npm:^2.1.4"
-    winston: "npm:^3.15.0"
+    winston: "npm:^3.17.0"
   bin:
     mock-server: bin/mock-server.cjs
   languageName: unknown