diff --git a/build/frontend-legacy/package-lock.json b/build/frontend-legacy/package-lock.json
index 62f986d21e9f5..f8f6e0b8d9872 100644
--- a/build/frontend-legacy/package-lock.json
+++ b/build/frontend-legacy/package-lock.json
@@ -42,7 +42,7 @@
         "cancelable-promise": "^4.3.1",
         "clipboard": "^2.0.11",
         "color": "^5.0.3",
-        "core-js": "^3.48.0",
+        "core-js": "^3.49.0",
         "crypto-browserify": "^3.12.1",
         "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
         "debounce": "^3.0.0",
@@ -8203,9 +8203,9 @@
       }
     },
     "node_modules/core-js": {
-      "version": "3.48.0",
-      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.48.0.tgz",
-      "integrity": "sha512-zpEHTy1fjTMZCKLHUZoVeylt9XrzaIN2rbPXEt0k+q7JE5CkCZdo6bNq55bn24a69CH7ErAVLKijxJja4fw+UQ==",
+      "version": "3.49.0",
+      "resolved": "https://registry.npmjs.org/core-js/-/core-js-3.49.0.tgz",
+      "integrity": "sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==",
       "hasInstallScript": true,
       "license": "MIT",
       "funding": {
diff --git a/build/frontend-legacy/package.json b/build/frontend-legacy/package.json
index 9d89700e743e0..f9de62195806f 100644
--- a/build/frontend-legacy/package.json
+++ b/build/frontend-legacy/package.json
@@ -58,7 +58,7 @@
     "cancelable-promise": "^4.3.1",
     "clipboard": "^2.0.11",
     "color": "^5.0.3",
-    "core-js": "^3.48.0",
+    "core-js": "^3.49.0",
     "crypto-browserify": "^3.12.1",
     "davclient.js": "nextcloud-deps/davclient.js#59d7777d7fe290c5f1fd74a58e7eb529b63e153d",
     "debounce": "^3.0.0",