diff --git a/package-lock.json b/package-lock.json
index 4b518c4ec..b9df99b33 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -11,7 +11,7 @@
       "dependencies": {
         "@aws-crypto/decrypt-node": "^1.0.3",
         "@aws-crypto/raw-rsa-keyring-node": "^1.1.0",
-        "@govuk-pay/pay-js-commons": "^6.0.16",
+        "@govuk-pay/pay-js-commons": "^6.0.18",
         "@govuk-pay/pay-js-metrics": "^1.0.6",
         "@sentry/node": "7.119.2",
         "cert-info": "^1.5.1",
@@ -2124,10 +2124,9 @@
       }
     },
     "node_modules/@govuk-pay/pay-js-commons": {
-      "version": "6.0.16",
-      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-6.0.16.tgz",
-      "integrity": "sha512-l6BlXOswete+/uloRLYYlJFaVXgZWSITqGfc+GzHTfXn8MMSKCGXDUXrFS4IIlyUtD8aCYBjrMcVHE67c5EPog==",
-      "license": "MIT",
+      "version": "6.0.18",
+      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-6.0.18.tgz",
+      "integrity": "sha512-lWQByrDSjV8/AeSypkPSsYNdxejXWlBzIxOS/isbD3K2jkaB+ZurR1vWkVTnjSN9tED+rvqe9eBdEtMEtX3sBw==",
       "dependencies": {
         "axios": "^1.6.5",
         "lodash": "4.17.21",
@@ -17790,9 +17789,9 @@
       }
     },
     "@govuk-pay/pay-js-commons": {
-      "version": "6.0.16",
-      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-6.0.16.tgz",
-      "integrity": "sha512-l6BlXOswete+/uloRLYYlJFaVXgZWSITqGfc+GzHTfXn8MMSKCGXDUXrFS4IIlyUtD8aCYBjrMcVHE67c5EPog==",
+      "version": "6.0.18",
+      "resolved": "https://registry.npmjs.org/@govuk-pay/pay-js-commons/-/pay-js-commons-6.0.18.tgz",
+      "integrity": "sha512-lWQByrDSjV8/AeSypkPSsYNdxejXWlBzIxOS/isbD3K2jkaB+ZurR1vWkVTnjSN9tED+rvqe9eBdEtMEtX3sBw==",
       "requires": {
         "axios": "^1.6.5",
         "lodash": "4.17.21",
diff --git a/package.json b/package.json
index 5a2310c78..ef3d3f0ef 100644
--- a/package.json
+++ b/package.json
@@ -72,7 +72,7 @@
   "dependencies": {
     "@aws-crypto/decrypt-node": "^1.0.3",
     "@aws-crypto/raw-rsa-keyring-node": "^1.1.0",
-    "@govuk-pay/pay-js-commons": "^6.0.16",
+    "@govuk-pay/pay-js-commons": "^6.0.18",
     "@govuk-pay/pay-js-metrics": "^1.0.6",
     "@sentry/node": "7.119.2",
     "cert-info": "^1.5.1",