diff --git a/mtx/sidecar/package-lock.json b/mtx/sidecar/package-lock.json
index 1f160f06..9095c9c0 100644
--- a/mtx/sidecar/package-lock.json
+++ b/mtx/sidecar/package-lock.json
@@ -5,7 +5,7 @@
   "packages": {
     "": {
       "dependencies": {
-        "@cap-js/hana": "^3",
+        "@cap-js/hana": "^3.0.2",
         "@sap/cds": "^10.0.5",
         "@sap/cds-mtxs": "^4",
         "@sap/xssec": "^4",
@@ -148,9 +148,9 @@
       }
     },
     "node_modules/@sap/cds-mtxs": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/@sap/cds-mtxs/-/cds-mtxs-4.0.1.tgz",
-      "integrity": "sha512-H+UygJY57D3be40X4TrgtLBVZCph9G8LAn+5VWNdL7lEWFMCqZM0bNj1AogmJXEUtlWOUWK98aznlsErY7UVaQ==",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@sap/cds-mtxs/-/cds-mtxs-4.0.2.tgz",
+      "integrity": "sha512-C8JzlIGPxh/p8vGGyQMOsSJPWGJlOtrakaoCOb+mxDXbuLPDNccbRlrqon0a9aqgqyf4iQCrTuRNMJpd05blTg==",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@sap/hdi-deploy": "^5"
@@ -231,9 +231,9 @@
       }
     },
     "node_modules/@sap/xssec": {
-      "version": "4.13.3",
-      "resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.13.3.tgz",
-      "integrity": "sha512-op5wFTpJGJFdwFcEFRDX30yKbB2Kknk+LJqXDcrHyPNLqvSqerTWXFdFnylhiIhoAdGFSccC6NimUhqFxIrUsA==",
+      "version": "4.15.0",
+      "resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.15.0.tgz",
+      "integrity": "sha512-I9TMMaWq4BNDNt9blJy8o2FV9uXjs2RyNTT7KBv9fK83bGoQxcipQ8e4DrxYb296GXg+HhE420kHuqmyXZSOuQ==",
       "license": "SAP DEVELOPER LICENSE AGREEMENT",
       "dependencies": {
         "debug": "^4.4.3",
diff --git a/mtx/sidecar/package.json b/mtx/sidecar/package.json
index fb0e20f6..cb541b53 100644
--- a/mtx/sidecar/package.json
+++ b/mtx/sidecar/package.json
@@ -3,7 +3,7 @@
     "@cap-js/hana": "^3.0.2",
     "@sap/cds": "^10.0.5",
     "@sap/cds-mtxs": "^4",
-    "@sap/xssec": "^4",
+    "@sap/xssec": "^4.15.0",
     "express": "^4.22.2"
   },
   "devDependencies": {
diff --git a/package-lock.json b/package-lock.json
index 39b2c237..466a71de 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -20,7 +20,7 @@
         "@cap-js/hana": "^3.0.2",
         "@sap/cds": "^10.0.5",
         "@sap/cds-mtxs": "^4",
-        "@sap/xssec": "^4",
+        "@sap/xssec": "^4.15.0",
         "express": "^4.22.2"
       },
       "devDependencies": {
@@ -187,9 +187,9 @@
       }
     },
     "node_modules/@sap/cds-dk": {
-      "version": "10.0.6",
-      "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-10.0.6.tgz",
-      "integrity": "sha512-rukYYrovNkpaRPgF6tI+tBHhel9WcpZRW2KFjVCVPCufrbTFqzz6PdCaQrb7tEctrRk5GBIL2bmN28s051Vt3w==",
+      "version": "10.0.7",
+      "resolved": "https://registry.npmjs.org/@sap/cds-dk/-/cds-dk-10.0.7.tgz",
+      "integrity": "sha512-M1INFmdNzr7dOoYzJ1MVhTyqYSg+vi8oH96N96CHo/cIM+wxMBJ9G/0OPppNs+pPrBPqkF91Xhy/FSGzwr7mfA==",
       "bundleDependencies": [
         "@cap-js/asyncapi",
         "@cap-js/db-service",
@@ -306,10 +306,10 @@
         "@cap-js/db-service": "*",
         "@cap-js/openapi": "^1.0.0",
         "@cap-js/sqlite": "^3",
-        "@sap/cds": ">=9",
+        "@sap/cds": "^10",
         "@sap/cds-compiler": "*",
         "@sap/cds-fiori": "*",
-        "@sap/cds-mtxs": ">=3",
+        "@sap/cds-mtxs": "^4",
         "@sap/hdi": "*",
         "@sap/hdi-deploy": "^5",
         "@sap/xsenv": "*",
@@ -338,7 +338,7 @@
         "es-object-atoms": "*",
         "escape-html": "*",
         "etag": "*",
-        "express": "^4.22.1 || ^5",
+        "express": "^5",
         "extsprintf": "*",
         "fill-range": "*",
         "finalhandler": "*",
@@ -443,7 +443,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@cap-js/openapi": {
-      "version": "1.5.0",
+      "version": "1.6.0",
       "dev": true,
       "inBundle": true,
       "license": "Apache-2.0",
@@ -497,7 +497,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@sap/cds": {
-      "version": "10.0.4",
+      "version": "10.0.5",
       "dev": true,
       "inBundle": true,
       "license": "SEE LICENSE IN LICENSE",
@@ -548,7 +548,7 @@
       }
     },
     "node_modules/@sap/cds-dk/node_modules/@sap/cds-mtxs": {
-      "version": "3.9.5",
+      "version": "4.0.2",
       "dev": true,
       "inBundle": true,
       "license": "SEE LICENSE IN LICENSE",
@@ -1503,7 +1503,7 @@
       "license": "MIT"
     },
     "node_modules/@sap/cds-dk/node_modules/sax": {
-      "version": "1.6.0",
+      "version": "1.6.1",
       "dev": true,
       "inBundle": true,
       "license": "BlueOak-1.0.0",
@@ -1773,7 +1773,7 @@
       "license": "ISC"
     },
     "node_modules/@sap/cds-dk/node_modules/ws": {
-      "version": "8.21.1",
+      "version": "8.21.2",
       "dev": true,
       "inBundle": true,
       "license": "MIT",
@@ -1828,7 +1828,9 @@
       }
     },
     "node_modules/@sap/cds-mtxs": {
-      "version": "4.0.1",
+      "version": "4.0.2",
+      "resolved": "https://registry.npmjs.org/@sap/cds-mtxs/-/cds-mtxs-4.0.2.tgz",
+      "integrity": "sha512-C8JzlIGPxh/p8vGGyQMOsSJPWGJlOtrakaoCOb+mxDXbuLPDNccbRlrqon0a9aqgqyf4iQCrTuRNMJpd05blTg==",
       "license": "SEE LICENSE IN LICENSE",
       "dependencies": {
         "@sap/hdi-deploy": "^5"
@@ -1922,7 +1924,9 @@
       "license": "MIT"
     },
     "node_modules/@sap/xssec": {
-      "version": "4.13.3",
+      "version": "4.15.0",
+      "resolved": "https://registry.npmjs.org/@sap/xssec/-/xssec-4.15.0.tgz",
+      "integrity": "sha512-I9TMMaWq4BNDNt9blJy8o2FV9uXjs2RyNTT7KBv9fK83bGoQxcipQ8e4DrxYb296GXg+HhE420kHuqmyXZSOuQ==",
       "license": "SAP DEVELOPER LICENSE AGREEMENT",
       "dependencies": {
         "debug": "^4.4.3",