diff --git a/test/ai-development/README.md b/test/ai-development/README.md
index 54553eee27aaa9..10442df782049c 100644
--- a/test/ai-development/README.md
+++ b/test/ai-development/README.md
@@ -96,8 +96,8 @@ This package is deliberately not one of the root workspaces: Promptfoo's
 dependency tree is large and only needed by people running evals, so it keeps
 its own lockfile and install step.
 
-Promptfoo is pinned to `0.122.1` because `0.122.2` adds a dependency affected
-by [GHSA-jmr9-qjv8-65gv](https://github.com/advisories/GHSA-jmr9-qjv8-65gv).
+Promptfoo is pinned to `0.123.1`. The scoped `get-uri` override uses `basic-ftp@6.2.1` to fix the directory-listing denial of service in [GHSA-c475-qrg2-pj4r](https://github.com/advisories/GHSA-c475-qrg2-pj4r). `get-uri` still requests version 5, so the override is needed until its dependency range includes the patched release.
+
 The package overrides also update two optional local-transformer dependencies to
 releases that fix [GHSA-xcpc-8h2w-3j85](https://github.com/advisories/GHSA-xcpc-8h2w-3j85),
 [GHSA-vwc7-r8mq-g2x9](https://github.com/advisories/GHSA-vwc7-r8mq-g2x9),
diff --git a/test/ai-development/package-lock.json b/test/ai-development/package-lock.json
index 72ebdce26b5f70..82615fcee7e752 100644
--- a/test/ai-development/package-lock.json
+++ b/test/ai-development/package-lock.json
@@ -5735,7 +5735,9 @@
 			}
 		},
 		"node_modules/basic-ftp": {
-			"version": "5.3.1",
+			"version": "6.2.1",
+			"resolved": "https://registry.npmjs.org/basic-ftp/-/basic-ftp-6.2.1.tgz",
+			"integrity": "sha512-bK67isD+lKq46AU8vNtjvMaT2ZqAOAmNCbxUHlFBRD4k15NWxyEjmaKtZPlgce58So4BNTjITGQOVTjL9y0ECA==",
 			"dev": true,
 			"license": "MIT",
 			"engines": {
diff --git a/test/ai-development/package.json b/test/ai-development/package.json
index eb509367bd0a7a..914b261b392e4d 100644
--- a/test/ai-development/package.json
+++ b/test/ai-development/package.json
@@ -30,6 +30,9 @@
 	},
 	"overrides": {
 		"sharp": "0.35.4",
+		"get-uri": {
+			"basic-ftp": "6.2.1"
+		},
 		"onnxruntime-node": {
 			"adm-zip": "0.6.1"
 		}