diff --git a/package-lock.json b/package-lock.json
index 283f080f..76672cbb 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8276,7 +8276,9 @@
       }
     },
     "node_modules/@faker-js/faker": {
-      "version": "9.9.0",
+      "version": "10.4.0",
+      "resolved": "https://registry.npmjs.org/@faker-js/faker/-/faker-10.4.0.tgz",
+      "integrity": "sha512-sDBWI3yLy8EcDzgobvJTWq1MJYzAkQdpjXuPukga9wXonhpMRvd1Izuo2Qgwey2OiEoRIBr35RMU9HJRoOHzpw==",
       "funding": [
         {
           "type": "opencollective",
@@ -8285,8 +8287,8 @@
       ],
       "license": "MIT",
       "engines": {
-        "node": ">=18.0.0",
-        "npm": ">=9.0.0"
+        "node": "^20.19.0 || ^22.13.0 || ^23.5.0 || >=24.0.0",
+        "npm": ">=10"
       }
     },
     "node_modules/@fontsource/source-sans-pro": {
@@ -28131,7 +28133,7 @@
         "@aws-sdk/client-sqs": "^3.900.0",
         "@aws-sdk/lib-dynamodb": "^3.900.0",
         "@aws-sdk/util-dynamodb": "^3.933.0",
-        "@faker-js/faker": "^9.6.0",
+        "@faker-js/faker": "^10.4.0",
         "@nhsdigital/nhs-notify-event-schemas-supplier-api": "^1.0.18",
         "@playwright/test": "^1.51.1",
         "csv-parse": "^6.1.0",
diff --git a/tests/playwright/package.json b/tests/playwright/package.json
index d8838f81..6a0c209f 100644
--- a/tests/playwright/package.json
+++ b/tests/playwright/package.json
@@ -9,7 +9,7 @@
     "@aws-sdk/client-sqs": "^3.900.0",
     "@aws-sdk/lib-dynamodb": "^3.900.0",
     "@aws-sdk/util-dynamodb": "^3.933.0",
-    "@faker-js/faker": "^9.6.0",
+    "@faker-js/faker": "^10.4.0",
     "@nhsdigital/nhs-notify-event-schemas-supplier-api": "^1.0.18",
     "@playwright/test": "^1.51.1",
     "csv-parse": "^6.1.0",