diff --git a/apps/hash-api/package.json b/apps/hash-api/package.json
index 72166c6285d..3c6175c2328 100644
--- a/apps/hash-api/package.json
+++ b/apps/hash-api/package.json
@@ -81,7 +81,7 @@
     "express-rate-limit": "7.5.0",
     "fractional-indexing": "2.1.0",
     "googleapis": "133.0.0",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "graphql-parse-resolve-info": "4.13.0",
     "graphql-scalars": "1.24.0",
     "helmet": "4.6.0",
diff --git a/apps/hash-frontend/package.json b/apps/hash-frontend/package.json
index 9ffca8d4794..50f00a2e603 100644
--- a/apps/hash-frontend/package.json
+++ b/apps/hash-frontend/package.json
@@ -79,7 +79,7 @@
     "graphology-layout-forceatlas2": "0.10.1",
     "graphology-shortest-path": "2.1.0",
     "graphology-simple-path": "0.2.0",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "iframe-resizer": "4.4.5",
     "immer": "9.0.21",
     "jsonpath": "1.1.1",
diff --git a/apps/plugin-browser/package.json b/apps/plugin-browser/package.json
index bfd0df68cc0..55954f20823 100755
--- a/apps/plugin-browser/package.json
+++ b/apps/plugin-browser/package.json
@@ -40,7 +40,7 @@
     "bowser": "2.11.0",
     "date-fns": "4.1.0",
     "fractional-indexing": "2.1.0",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "lodash.debounce": "4.0.8",
     "react": "18.2.0",
     "react-dom": "18.2.0",
diff --git a/libs/@local/hash-isomorphic-utils/package.json b/libs/@local/hash-isomorphic-utils/package.json
index 56effbeb244..143f788cb4f 100644
--- a/libs/@local/hash-isomorphic-utils/package.json
+++ b/libs/@local/hash-isomorphic-utils/package.json
@@ -68,7 +68,7 @@
     "@types/pluralize": "0.0.33",
     "@vitest/coverage-istanbul": "2.1.8",
     "eslint": "9.17.0",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "next": "13.5.5",
     "prettier": "3.4.2",
     "react": "18.2.0",
diff --git a/tests/hash-backend-integration/package.json b/tests/hash-backend-integration/package.json
index 141172d6ae3..e7748e5ec10 100644
--- a/tests/hash-backend-integration/package.json
+++ b/tests/hash-backend-integration/package.json
@@ -26,7 +26,7 @@
     "@rust/hash-graph-type-defs": "0.0.0-private",
     "execa": "5.1.1",
     "fractional-indexing": "2.1.0",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "graphql-request": "3.7.0",
     "node-fetch": "2.7.0"
   },
diff --git a/tests/hash-playwright/package.json b/tests/hash-playwright/package.json
index f4d7bc1c9d6..0a70fc4828c 100644
--- a/tests/hash-playwright/package.json
+++ b/tests/hash-playwright/package.json
@@ -18,7 +18,7 @@
     "@local/tsconfig": "0.0.0-private",
     "@playwright/test": "1.49.1",
     "execa": "5.1.1",
-    "graphql": "16.9.0",
+    "graphql": "16.10.0",
     "js-yaml": "4.1.0"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index 52ffdae6fc2..399eb98a873 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -443,7 +443,7 @@ __metadata:
     express-rate-limit: "npm:7.5.0"
     fractional-indexing: "npm:2.1.0"
     googleapis: "npm:133.0.0"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     graphql-parse-resolve-info: "npm:4.13.0"
     graphql-scalars: "npm:1.24.0"
     helmet: "npm:4.6.0"
@@ -569,7 +569,7 @@ __metadata:
     graphology-shortest-path: "npm:2.1.0"
     graphology-simple-path: "npm:0.2.0"
     graphology-types: "npm:0.24.8"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     iframe-resizer: "npm:4.4.5"
     immer: "npm:9.0.21"
     jsonpath: "npm:1.1.1"
@@ -852,7 +852,7 @@ __metadata:
     file-loader: "npm:6.2.0"
     fractional-indexing: "npm:2.1.0"
     fs-extra: "npm:11.1.0"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     html-loader: "npm:4.2.0"
     html-webpack-plugin: "npm:5.6.3"
     lodash.debounce: "npm:4.0.8"
@@ -9233,7 +9233,7 @@ __metadata:
     eslint: "npm:9.17.0"
     fix-esm-import-path: "npm:1.10.1"
     fractional-indexing: "npm:2.1.0"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     id128: "npm:1.6.6"
     immer: "npm:9.0.21"
     jsonschema: "npm:1.4.1"
@@ -16557,7 +16557,7 @@ __metadata:
     eslint: "npm:9.17.0"
     execa: "npm:5.1.1"
     fractional-indexing: "npm:2.1.0"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     graphql-request: "npm:3.7.0"
     node-fetch: "npm:2.7.0"
     rimraf: "npm:6.0.1"
@@ -16620,7 +16620,7 @@ __metadata:
     "@playwright/test": "npm:1.49.1"
     eslint: "npm:9.17.0"
     execa: "npm:5.1.1"
-    graphql: "npm:16.9.0"
+    graphql: "npm:16.10.0"
     js-yaml: "npm:4.1.0"
     rimraf: "npm:6.0.1"
     typescript: "npm:5.6.3"
@@ -29340,10 +29340,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"graphql@npm:16.9.0":
-  version: 16.9.0
-  resolution: "graphql@npm:16.9.0"
-  checksum: 10c0/a8850f077ff767377237d1f8b1da2ec70aeb7623cdf1dfc9e1c7ae93accc0c8149c85abe68923be9871a2934b1bce5a2496f846d4d56e1cfb03eaaa7ddba9b6a
+"graphql@npm:16.10.0":
+  version: 16.10.0
+  resolution: "graphql@npm:16.10.0"
+  checksum: 10c0/303730675538c8bd6c76b447dc6f03e61242e2d2596b408c34759666ec4877409e5593a7a0467d590ac5407b8c663b093b599556a77f24f281abea69ddc53de6
   languageName: node
   linkType: hard