diff --git a/.changeset/pr-154.md b/.changeset/pr-154.md
new file mode 100644
index 0000000..4ac0932
--- /dev/null
+++ b/.changeset/pr-154.md
@@ -0,0 +1,5 @@
+---
+"@wdio/browserstack-service": patch
+---
+
+- Updated `@grpc/grpc-js` to `^1.13.5`, resolving two high-severity advisories (CVE-2026-48068, CVE-2026-48069) reported by dependency scanners against earlier releases.
diff --git a/package-lock.json b/package-lock.json
index b8d072b..ad1443c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1019,9 +1019,9 @@
       }
     },
     "node_modules/@grpc/grpc-js": {
-      "version": "1.13.3",
-      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.13.3.tgz",
-      "integrity": "sha512-FTXHdOoPbZrBjlVLHuKbDZnsTxXv2BlHF57xw6LuThXacXvtkahEPED0CKMk6obZDf65Hv4k3z62eyPNpvinIg==",
+      "version": "1.13.5",
+      "resolved": "https://registry.npmjs.org/@grpc/grpc-js/-/grpc-js-1.13.5.tgz",
+      "integrity": "sha512-ILtqflBY9tzd79bKa87eS98vZFCso5/uYxuArfcKrmRDatRg7KWmI/Vr9+xOEf2Y2E/44HXMCx3JKZe/Y4yF6g==",
       "license": "Apache-2.0",
       "dependencies": {
         "@grpc/proto-loader": "^0.7.13",
@@ -12900,7 +12900,7 @@
       "dependencies": {
         "@browserstack/ai-sdk-node": "1.5.17",
         "@bufbuild/protobuf": "^2.5.2",
-        "@grpc/grpc-js": "1.13.3",
+        "@grpc/grpc-js": "~1.13.5",
         "@percy/appium-app": "^2.0.9",
         "@percy/selenium-webdriver": "^2.2.2",
         "@types/gitconfiglocal": "^2.0.1",
diff --git a/packages/browserstack-service/package.json b/packages/browserstack-service/package.json
index 0328094..fa41306 100644
--- a/packages/browserstack-service/package.json
+++ b/packages/browserstack-service/package.json
@@ -55,7 +55,7 @@
   "dependencies": {
     "@browserstack/ai-sdk-node": "1.5.17",
     "@bufbuild/protobuf": "^2.5.2",
-    "@grpc/grpc-js": "1.13.3",
+    "@grpc/grpc-js": "~1.13.5",
     "@percy/appium-app": "^2.0.9",
     "@percy/selenium-webdriver": "^2.2.2",
     "@types/gitconfiglocal": "^2.0.1",