diff --git a/common/config/rush/pnpm-config.json b/common/config/rush/pnpm-config.json
index a26f8302b36..ed2af158cbd 100644
--- a/common/config/rush/pnpm-config.json
+++ b/common/config/rush/pnpm-config.json
@@ -214,7 +214,10 @@
 
     // Newer versions of `cheerio` have a dependency on `undici`, which does not support Node 18.
     // Remove when we drop support for Node 18
-    "@vscode/vsce>cheerio": "1.0.0-rc.12"
+    "@vscode/vsce>cheerio": "1.0.0-rc.12",
+
+    // `loader-utils@2.0.0` has a vulnerability
+    "loader-utils@^2.0.0": "2.0.4"
   },
 
   /**
diff --git a/common/config/subspaces/build-tests-subspace/pnpm-lock.yaml b/common/config/subspaces/build-tests-subspace/pnpm-lock.yaml
index 839457715b5..afda51a7af0 100644
--- a/common/config/subspaces/build-tests-subspace/pnpm-lock.yaml
+++ b/common/config/subspaces/build-tests-subspace/pnpm-lock.yaml
@@ -9,6 +9,7 @@ overrides:
   '@types/estree': 1.0.8
   '@types/react@17.0.74>@types/scheduler': 0.16.8
   '@vscode/vsce>cheerio': 1.0.0-rc.12
+  loader-utils@^2.0.0: 2.0.4
 
 packageExtensionsChecksum: sha256-8fXYR9X9qRA57SZJJSADz6C9KMP6QQYYut4DHyehah0=
 
diff --git a/common/config/subspaces/build-tests-subspace/repo-state.json b/common/config/subspaces/build-tests-subspace/repo-state.json
index 2f794633d15..1859d673170 100644
--- a/common/config/subspaces/build-tests-subspace/repo-state.json
+++ b/common/config/subspaces/build-tests-subspace/repo-state.json
@@ -1,6 +1,6 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "cfb5354fcb23598af945bb5f021b65d086746977",
+  "pnpmShrinkwrapHash": "b2cb1561cac292fce7df073fd38daff0a860de9d",
   "preferredVersionsHash": "550b4cee0bef4e97db6c6aad726df5149d20e7d9",
   "packageJsonInjectedDependenciesHash": "d9191682d2cd2b01df1eb5ae8bd44a940a5ec2a4"
 }
diff --git a/common/config/subspaces/default/pnpm-lock.yaml b/common/config/subspaces/default/pnpm-lock.yaml
index b541f892d61..2a061d28849 100644
--- a/common/config/subspaces/default/pnpm-lock.yaml
+++ b/common/config/subspaces/default/pnpm-lock.yaml
@@ -9,6 +9,7 @@ overrides:
   '@types/estree': 1.0.8
   '@types/react@17.0.74>@types/scheduler': 0.16.8
   '@vscode/vsce>cheerio': 1.0.0-rc.12
+  loader-utils@^2.0.0: 2.0.4
 
 packageExtensionsChecksum: sha256-8fXYR9X9qRA57SZJJSADz6C9KMP6QQYYut4DHyehah0=
 
@@ -14802,10 +14803,6 @@ packages:
     resolution: {integrity: sha512-I5d00Pd/jwMD2QCduo657+YM/6L3KZu++pmX9VFncxaxvHcru9jx1lBaFft+r4Mt2jK0Yhp41XlRAihzPxHNCg==}
     engines: {node: '>=4.0.0'}
 
-  loader-utils@2.0.0:
-    resolution: {integrity: sha512-rP4F0h2RaWSvPEkD7BLDFQnvSf+nK+wr3ESUjNTyAGobqrijmW92zc+SO6d4p4B1wh7+B/Jg1mkQe5NYUEHtHQ==}
-    engines: {node: '>=8.9.0'}
-
   loader-utils@2.0.4:
     resolution: {integrity: sha512-xXqpXoINfFhgua9xiqD8fPFHgkoq1mmmpE92WlDbm9rNRd/EbRb+Gqf908T2DMfuHjjJlksiK2RbHVOdD/MqSw==}
     engines: {node: '>=8.9.0'}
@@ -22828,7 +22825,7 @@ snapshots:
     dependencies:
       '@mdx-js/mdx': 1.6.22
       '@mdx-js/react': 1.6.22(react@17.0.2)
-      loader-utils: 2.0.0
+      loader-utils: 2.0.4
     transitivePeerDependencies:
       - react
       - supports-color
@@ -32921,12 +32918,6 @@ snapshots:
       emojis-list: 3.0.0
       json5: 1.0.2
 
-  loader-utils@2.0.0:
-    dependencies:
-      big.js: 5.2.2
-      emojis-list: 3.0.0
-      json5: 2.2.3
-
   loader-utils@2.0.4:
     dependencies:
       big.js: 5.2.2
diff --git a/common/config/subspaces/default/repo-state.json b/common/config/subspaces/default/repo-state.json
index 6d488c52b64..d2b1f86401b 100644
--- a/common/config/subspaces/default/repo-state.json
+++ b/common/config/subspaces/default/repo-state.json
@@ -1,5 +1,5 @@
 // DO NOT MODIFY THIS FILE MANUALLY BUT DO COMMIT IT. It is generated and used by Rush.
 {
-  "pnpmShrinkwrapHash": "1f85cefe773bc0a7c2bbf2385dfe17dec0acaecd",
+  "pnpmShrinkwrapHash": "c6a5c74148e604826cde9d0c1532be2a1630b396",
   "preferredVersionsHash": "9ba05fe872434900a0b29c308a94015078f37c47"
 }