diff --git a/package.json b/package.json
index 79757b042..26011de1e 100644
--- a/package.json
+++ b/package.json
@@ -105,7 +105,7 @@
     "papaparse": "^5.5.3",
     "postcss": "^8.5.8",
     "posthog-js": "^1.363.6",
-    "posthog-node": "^5.28.6",
+    "posthog-node": "^5.28.8",
     "prop-types": "^15.8.1",
     "qrcode": "^1.5.4",
     "quadprog": "^1.6.1",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 01ab21447..55848e8b6 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -180,8 +180,8 @@ importers:
         specifier: ^1.363.6
         version: 1.363.6
       posthog-node:
-        specifier: ^5.28.6
-        version: 5.28.6(rxjs@7.8.2)
+        specifier: ^5.28.8
+        version: 5.28.8(rxjs@7.8.2)
       prop-types:
         specifier: ^15.8.1
         version: 15.8.1
@@ -1872,6 +1872,9 @@ packages:
   '@posthog/core@1.24.1':
     resolution: {integrity: sha512-e8AciAnc6MRFws89ux8lJKFAaI03yEon0ASDoUO7yS91FVqbUGXYekObUUR3LHplcg+pmyiJBI0jolY0SFbGRA==}
 
+  '@posthog/core@1.24.3':
+    resolution: {integrity: sha512-nTyL1R/8V5vfdH37MbjXDYWFnUoxVijb2TnfJSNHz0+RBLtNnq0hNnBDCwWLl5yh1bzeJBYTT8UF+dV7D8y03w==}
+
   '@posthog/nextjs-config@1.8.23':
     resolution: {integrity: sha512-x0vwmpy6KCw891hmh/Mfok49yMqaK6wLFPxPzbI2ifL/afqLKYRYYSUHm1pk5/lkMSBhI+rxBHDveKrBuiFyaQ==}
     engines: {node: ^20.20.0 || >=22.22.0}
@@ -3776,6 +3779,7 @@ packages:
   '@xmldom/xmldom@0.9.8':
     resolution: {integrity: sha512-p96FSY54r+WJ50FIOsCOjyj/wavs8921hG5+kVMmZgKcvIKxMXHTrjNJvRgWa/zuX3B6t2lijLNFaOyuxUH+2A==}
     engines: {node: '>=14.6'}
+    deprecated: this version has critical issues, please update to the latest version
 
   '@xtuc/ieee754@1.2.0':
     resolution: {integrity: sha512-DX8nKgqcGwsc0eJSqYt5lwP4DH5FlHnmuWWBRy7X0NcaGR0ZtuyeESgMwTYVEtxmsNGY+qit4QYT/MIYTOTPeA==}
@@ -6231,8 +6235,8 @@ packages:
   posthog-js@1.363.6:
     resolution: {integrity: sha512-eQ+Ypml3JOEMQWt21XEea6J8vD77TNyoz4Yv/xxjlTRja+ilmJtQw/SuVAB3BobjgHKYUomXX7Fc4gH/zTVpbg==}
 
-  posthog-node@5.28.6:
-    resolution: {integrity: sha512-f3k45gplzVxbhIMj3x6jZP6iH1wacBurKrZxD1VwW+7f8L2DtjJbkiQw0oKwubgtCZcKNroPa8y6t/nDITgOMw==}
+  posthog-node@5.28.8:
+    resolution: {integrity: sha512-UD55SdSbgUvoOb3HkvNC22ZgpdeNknDrao8+yYTB/rDnwgaibPB7pJJzgn4j7MIUw7DOTEHEmJRqza1EDtK2Zw==}
     engines: {node: ^20.20.0 || >=22.22.0}
     peerDependencies:
       rxjs: ^7.0.0
@@ -9125,6 +9129,10 @@ snapshots:
     dependencies:
       cross-spawn: 7.0.6
 
+  '@posthog/core@1.24.3':
+    dependencies:
+      cross-spawn: 7.0.6
+
   '@posthog/nextjs-config@1.8.23(next@16.2.1(@babel/core@7.28.5)(@opentelemetry/api@1.9.1)(@playwright/test@1.58.2)(babel-plugin-react-compiler@1.0.0)(react-dom@19.2.4(react@19.2.4))(react@19.2.4)(sass@1.98.0))(webpack@5.105.2(esbuild@0.27.4))':
     dependencies:
       '@posthog/cli': 0.7.4
@@ -14336,9 +14344,9 @@ snapshots:
       query-selector-shadow-dom: 1.0.1
       web-vitals: 5.2.0
 
-  posthog-node@5.28.6(rxjs@7.8.2):
+  posthog-node@5.28.8(rxjs@7.8.2):
     dependencies:
-      '@posthog/core': 1.24.1
+      '@posthog/core': 1.24.3
     optionalDependencies:
       rxjs: 7.8.2