diff --git a/package-lock.json b/package-lock.json
index 1e3391d845..1951de9294 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -42289,6 +42289,27 @@
         "node": ">= 10"
       }
     },
+    "node_modules/zod": {
+      "version": "4.0.17",
+      "resolved": "https://registry.npmjs.org/zod/-/zod-4.0.17.tgz",
+      "integrity": "sha512-1PHjlYRevNxxdy2JZ8JcNAw7rX8V9P1AKkP+x/xZfxB0K5FYfuV+Ug6P/6NVSR2jHQ+FzDDoDHS04nYUsOIyLQ==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/colinhacks"
+      }
+    },
+    "node_modules/zod-validation-error": {
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/zod-validation-error/-/zod-validation-error-4.0.1.tgz",
+      "integrity": "sha512-F3rdaCOHs5ViJ5YTz5zzRtfkQdMdIeKudJAoxy7yB/2ZMEHw73lmCAcQw11r7++20MyGl4WV59EVh7A9rNAyog==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.0.0"
+      },
+      "peerDependencies": {
+        "zod": "^3.25.0 || ^4.0.0"
+      }
+    },
     "services/analytics": {
       "name": "@overleaf/analytics",
       "dependencies": {
@@ -44695,7 +44716,9 @@
         "xml-crypto": "^2.1.6",
         "xml2js": "^0.6.2",
         "xregexp": "^4.3.0",
-        "yauzl": "^2.10.0"
+        "yauzl": "^2.10.0",
+        "zod": "^4.0.17",
+        "zod-validation-error": "^4.0.1"
       },
       "devDependencies": {
         "@babel/cli": "^7.27.0",
diff --git a/services/web/package.json b/services/web/package.json
index 7d83193c63..5812ae7df4 100644
--- a/services/web/package.json
+++ b/services/web/package.json
@@ -181,7 +181,9 @@
     "xml-crypto": "^2.1.6",
     "xml2js": "^0.6.2",
     "xregexp": "^4.3.0",
-    "yauzl": "^2.10.0"
+    "yauzl": "^2.10.0",
+    "zod": "^4.0.17",
+    "zod-validation-error": "^4.0.1"
   },
   "devDependencies": {
     "@babel/cli": "^7.27.0",