diff --git a/package.json b/package.json
index a8f1931b58..ae05dab076 100644
--- a/package.json
+++ b/package.json
@@ -107,6 +107,9 @@
     "node": "24.11.0"
   },
   "pnpm": {
+    "overrides": {
+      "webdav@5>fast-xml-parser": "^5.0.0"
+    },
     "patchedDependencies": {
       "caf@15.0.1": "patches/caf@15.0.1.patch",
       "vue3-gettext@2.4.0": "patches/vue3-gettext@2.4.0.patch",
diff --git a/packages/web-client/package.json b/packages/web-client/package.json
index 7eaa39d0be..6516264169 100644
--- a/packages/web-client/package.json
+++ b/packages/web-client/package.json
@@ -84,7 +84,7 @@
     "@casl/ability": "^6.7.1",
     "@microsoft/fetch-event-source": "^2.0.1",
     "axios": "^1.7.7",
-    "fast-xml-parser": "^4.5.0",
+    "fast-xml-parser": "^5.0.0",
     "lodash-es": "^4.17.21",
     "luxon": "^3.5.0",
     "uuid": "^13.0.0",
@@ -99,5 +99,10 @@
     "vite-plugin-dts": "4.5.4",
     "vite-plugin-node-polyfills": "0.24.0",
     "vite": "^7.0.0"
+  },
+  "pnpm": {
+    "overrides": {
+      "webdav@5>fast-xml-parser": "^5.0.0"
+    }
   }
 }
diff --git a/packages/web-runtime/package.json b/packages/web-runtime/package.json
index b4a285e7d4..1c3a22a2c2 100644
--- a/packages/web-runtime/package.json
+++ b/packages/web-runtime/package.json
@@ -39,7 +39,6 @@
     "vue-router": "4.6.3",
     "vue": "3.5.22",
     "vue3-gettext": "2.4.0",
-    "webdav": "5.8.0",
     "xml-js": "^1.6.11",
     "zod": "4.1.12"
   },
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 17f8a872cb..11afdbb688 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -4,6 +4,9 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
+overrides:
+  webdav@5>fast-xml-parser: ^5.0.0
+
 patchedDependencies:
   caf@15.0.1:
     hash: b09bdde8a1f7e834af8677123b32ceb4f485966fdb476facf5b6c64157c9fc14
@@ -758,8 +761,8 @@ importers:
         specifier: ^1.7.7
         version: 1.13.1
       fast-xml-parser:
-        specifier: ^4.5.0
-        version: 4.5.3
+        specifier: ^5.0.0
+        version: 5.3.4
       lodash-es:
         specifier: ^4.17.21
         version: 4.17.23
@@ -1040,9 +1043,6 @@ importers:
       vue3-gettext:
         specifier: 2.4.0
         version: 2.4.0(patch_hash=6f231bbef273efbc788b5657c47fc744b52bc838f972357a764c144fde6065f2)(@vue/compiler-sfc@3.5.22)(vue@3.5.22(typescript@5.9.3))
-      webdav:
-        specifier: 5.8.0
-        version: 5.8.0
       xml-js:
         specifier: ^1.6.11
         version: 1.6.11
@@ -4226,8 +4226,8 @@ packages:
   fast-safe-stringify@2.1.1:
     resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
 
-  fast-xml-parser@4.5.3:
-    resolution: {integrity: sha512-RKihhV+SHsIUGXObeVy9AXiBbFwkVk7Syp8XgwN5U3JV416+Gwp/GO9i0JYKmikykgz/UHRrrV4ROuZEo/T0ig==}
+  fast-xml-parser@5.3.4:
+    resolution: {integrity: sha512-EFd6afGmXlCx8H8WTZHhAoDaWaGyuIBoZJ2mknrNxug+aZKjkp0a0dlars9Izl+jF+7Gu1/5f/2h68cQpe0IiA==}
     hasBin: true
 
   fastq@1.19.1:
@@ -6012,8 +6012,8 @@ packages:
     resolution: {integrity: sha512-4X2FR3UwhNUE9G49aIsJW5hRRR3GXGTBTZRMfv568O60ojM8HcWjV/VxAxCDW3SUND33O6ZY66ZuRcdkj73q2g==}
     engines: {node: '>=14.16'}
 
-  strnum@1.1.2:
-    resolution: {integrity: sha512-vrN+B7DBIoTTZjnPNewwhx6cBA/H+IS7rfW68n7XxC1y7uoiGQBxaKzqucGUgavX15dJgiGztLJ8vxuEzwqBdA==}
+  strnum@2.1.2:
+    resolution: {integrity: sha512-l63NF9y/cLROq/yqKXSLtcMeeyOfnSQlfMSlzFt/K73oIaD8DGaQWd7Z34X9GPiKqP5rbSh84Hl4bOlLcjiSrQ==}
 
   style-mod@4.1.3:
     resolution: {integrity: sha512-i/n8VsZydrugj3Iuzll8+x/00GH2vnYsk1eomD8QiRrSAeW6ItbCQDtfXCeJHd0iwiNagqjQkvpvREEPtW3IoQ==}
@@ -10320,9 +10320,9 @@ snapshots:
 
   fast-safe-stringify@2.1.1: {}
 
-  fast-xml-parser@4.5.3:
+  fast-xml-parser@5.3.4:
     dependencies:
-      strnum: 1.1.2
+      strnum: 2.1.2
 
   fastq@1.19.1:
     dependencies:
@@ -12150,7 +12150,7 @@ snapshots:
 
   strip-json-comments@5.0.2: {}
 
-  strnum@1.1.2: {}
+  strnum@2.1.2: {}
 
   style-mod@4.1.3: {}
 
@@ -12706,7 +12706,7 @@ snapshots:
       base-64: 1.0.0
       byte-length: 1.0.2
       entities: 6.0.1
-      fast-xml-parser: 4.5.3
+      fast-xml-parser: 5.3.4
       hot-patcher: 2.0.1
       layerr: 3.0.0
       md5: 2.3.0