diff --git a/package-lock.json b/package-lock.json
index 2440964d4..041efbd95 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "@nextcloud/router": "^3.0.1",
         "@nextcloud/vue": "^8.17.1",
         "blueimp-md5": "^2.19.0",
-        "chroma-js": "^3.0.0",
+        "chroma-js": "^3.1.1",
         "dompurify": "^3.1.6",
         "lodash": "^4.17.21",
         "markdown-it": "^14.1.0",
@@ -6888,9 +6888,9 @@
       "dev": true
     },
     "node_modules/chroma-js": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/chroma-js/-/chroma-js-3.0.0.tgz",
-      "integrity": "sha512-ZFn4qxtZTvRJ7XatOLgaHGJYN10LoS6T0EMsu7IVayFG5+b6Yw8wCGQL5qLgo4B+wrRZ9niCrozOQ4a584bvaA=="
+      "version": "3.1.1",
+      "resolved": "https://registry.npmjs.org/chroma-js/-/chroma-js-3.1.1.tgz",
+      "integrity": "sha512-CGr6w73Gi86142RWqZ1RjED/CyduYw2vMTikQZUvr2jGIihnZlMo/Kzm9rYHWDP2pJc6eebwc8CkX0iteBon+A=="
     },
     "node_modules/chrome-trace-event": {
       "version": "1.0.3",
diff --git a/package.json b/package.json
index 9dafce8da..a1c05f2cb 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
     "@nextcloud/router": "^3.0.1",
     "@nextcloud/vue": "^8.17.1",
     "blueimp-md5": "^2.19.0",
-    "chroma-js": "^3.0.0",
+    "chroma-js": "^3.1.1",
     "dompurify": "^3.1.6",
     "lodash": "^4.17.21",
     "markdown-it": "^14.1.0",