diff --git a/@commitlint/load/package.json b/@commitlint/load/package.json
index bf67ec6a63..7dc5820a4e 100644
--- a/@commitlint/load/package.json
+++ b/@commitlint/load/package.json
@@ -50,7 +50,7 @@
     "@commitlint/types": "^18.4.0",
     "@types/node": "^18.11.9",
     "chalk": "^4.1.0",
-    "cosmiconfig": "^8.0.0",
+    "cosmiconfig": "^8.3.6",
     "cosmiconfig-typescript-loader": "^5.0.0",
     "lodash.isplainobject": "^4.0.6",
     "lodash.merge": "^4.6.2",
diff --git a/yarn.lock b/yarn.lock
index 943bbf76d2..0937144f0e 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -3336,7 +3336,7 @@ cosmiconfig@^7.0.0:
     path-type "^4.0.0"
     yaml "^1.10.0"
 
-cosmiconfig@^8.0.0:
+cosmiconfig@^8.3.6:
   version "8.3.6"
   resolved "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-8.3.6.tgz#060a2b871d66dba6c8538ea1118ba1ac16f5fae3"
   integrity sha512-kcZ6+W5QzcJ3P1Mt+83OUv/oHFqZHIx8DuxG6eZ5RGMERoLqp4BuGjhHLYGK+Kf5XVkQvqBSmAy/nGWN3qDgEA==