diff --git a/package-lock.json b/package-lock.json
index 29a3acaf6..4a343fc04 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -24,7 +24,7 @@
         "@nextcloud/router": "^3.0.1",
         "@nextcloud/vue": "^8.17.0",
         "blueimp-md5": "^2.19.0",
-        "chroma-js": "^2.6.0",
+        "chroma-js": "^3.0.0",
         "dompurify": "^3.1.6",
         "lodash": "^4.17.21",
         "markdown-it": "^14.1.0",
@@ -6899,9 +6899,9 @@
       "dev": true
     },
     "node_modules/chroma-js": {
-      "version": "2.6.0",
-      "resolved": "https://registry.npmjs.org/chroma-js/-/chroma-js-2.6.0.tgz",
-      "integrity": "sha512-BLHvCB9s8Z1EV4ethr6xnkl/P2YRFOGqfgvuMG/MyCbZPrTA+NeiByY6XvgF0zP4/2deU2CXnWyMa3zu1LqQ3A=="
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/chroma-js/-/chroma-js-3.0.0.tgz",
+      "integrity": "sha512-ZFn4qxtZTvRJ7XatOLgaHGJYN10LoS6T0EMsu7IVayFG5+b6Yw8wCGQL5qLgo4B+wrRZ9niCrozOQ4a584bvaA=="
     },
     "node_modules/chrome-trace-event": {
       "version": "1.0.3",
diff --git a/package.json b/package.json
index ec1e7691f..25a1f73d7 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
     "@nextcloud/router": "^3.0.1",
     "@nextcloud/vue": "^8.17.0",
     "blueimp-md5": "^2.19.0",
-    "chroma-js": "^2.6.0",
+    "chroma-js": "^3.0.0",
     "dompurify": "^3.1.6",
     "lodash": "^4.17.21",
     "markdown-it": "^14.1.0",