diff --git a/package.json b/package.json
index c3ab689466d..c05c9a532f4 100644
--- a/package.json
+++ b/package.json
@@ -316,7 +316,7 @@
     "i18next": "^23.0.0",
     "i18next-browser-languagedetector": "^7.0.2",
     "immer": "10.0.4",
-    "immutable": "4.3.5",
+    "immutable": "4.3.6",
     "jquery": "3.7.1",
     "js-yaml": "^4.1.0",
     "json-markup": "^1.1.0",
diff --git a/packages/grafana-sql/package.json b/packages/grafana-sql/package.json
index 277c26387c0..2f8ba2296ee 100644
--- a/packages/grafana-sql/package.json
+++ b/packages/grafana-sql/package.json
@@ -21,7 +21,7 @@
     "@grafana/runtime": "11.1.0-pre",
     "@grafana/ui": "11.1.0-pre",
     "@react-awesome-query-builder/ui": "6.4.2",
-    "immutable": "4.3.5",
+    "immutable": "4.3.6",
     "lodash": "4.17.21",
     "react": "18.2.0",
     "react-dom": "18.2.0",
diff --git a/packages/grafana-ui/package.json b/packages/grafana-ui/package.json
index 9ab4e1c7e63..d7797d86147 100644
--- a/packages/grafana-ui/package.json
+++ b/packages/grafana-ui/package.json
@@ -69,7 +69,7 @@
     "hoist-non-react-statics": "3.3.2",
     "i18next": "^23.0.0",
     "i18next-browser-languagedetector": "^7.0.2",
-    "immutable": "4.3.5",
+    "immutable": "4.3.6",
     "is-hotkey": "0.2.0",
     "jquery": "3.7.1",
     "lodash": "4.17.21",
diff --git a/yarn.lock b/yarn.lock
index 9e7ca244ee7..92ff1eb38ef 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -4002,7 +4002,7 @@ __metadata:
     "@types/systemjs": "npm:6.13.5"
     "@types/testing-library__jest-dom": "npm:5.14.9"
     "@types/uuid": "npm:9.0.8"
-    immutable: "npm:4.3.5"
+    immutable: "npm:4.3.6"
     jest: "npm:^29.6.4"
     lodash: "npm:4.17.21"
     react: "npm:18.2.0"
@@ -4116,7 +4116,7 @@ __metadata:
     hoist-non-react-statics: "npm:3.3.2"
     i18next: "npm:^23.0.0"
     i18next-browser-languagedetector: "npm:^7.0.2"
-    immutable: "npm:4.3.5"
+    immutable: "npm:4.3.6"
     is-hotkey: "npm:0.2.0"
     jquery: "npm:3.7.1"
     lodash: "npm:4.17.21"
@@ -18445,7 +18445,7 @@ __metadata:
     i18next-browser-languagedetector: "npm:^7.0.2"
     i18next-parser: "npm:8.13.0"
     immer: "npm:10.0.4"
-    immutable: "npm:4.3.5"
+    immutable: "npm:4.3.6"
     jest: "npm:29.7.0"
     jest-canvas-mock: "npm:2.5.2"
     jest-date-mock: "npm:1.0.10"
@@ -19405,10 +19405,10 @@ __metadata:
   languageName: node
   linkType: hard
 
-"immutable@npm:4.3.5, immutable@npm:^4.0.0":
-  version: 4.3.5
-  resolution: "immutable@npm:4.3.5"
-  checksum: 10/dbc1b8c808b9aa18bfce2e0c7bc23714a47267bc311f082145cc9220b2005e9b9cd2ae78330f164a19266a2b0f78846c60f4f74893853ac16fd68b5ae57092d2
+"immutable@npm:4.3.6, immutable@npm:^4.0.0":
+  version: 4.3.6
+  resolution: "immutable@npm:4.3.6"
+  checksum: 10/59fedb67f26e265035616b27e33ef90b53b434cf76fb09212ec2d6ae32ee8d2fe2641e6dc32dbc78498c521fbf5f72c6740d39affba63a0a36a3884272371857
   languageName: node
   linkType: hard