diff --git a/ng-dev/package.json b/ng-dev/package.json
index ccca3d938..a153e566c 100644
--- a/ng-dev/package.json
+++ b/ng-dev/package.json
@@ -47,7 +47,7 @@
     "cli-progress": "3.12.0",
     "conventional-commits-filter": "5.0.0",
     "conventional-commits-parser": "6.2.1",
-    "ejs": "3.1.10",
+    "ejs": "4.0.1",
     "encoding": "0.1.13",
     "fast-glob": "3.3.3",
     "firebase": "12.7.0",
diff --git a/ng-dev/release/notes/release-notes.ts b/ng-dev/release/notes/release-notes.ts
index 23f50f850..b3af6d228 100644
--- a/ng-dev/release/notes/release-notes.ts
+++ b/ng-dev/release/notes/release-notes.ts
@@ -5,7 +5,7 @@
  * Use of this source code is governed by an MIT-style license that can be
  * found in the LICENSE file at https://angular.io/license
  */
-import {render} from 'ejs';
+import ejs from 'ejs';
 import semver from 'semver';
 import {CommitFromGitLog} from '../../commit-message/parse.js';
 
@@ -48,14 +48,14 @@ export class ReleaseNotes {
 
   /** Retrieve the release note generated for a Github Release. */
   async getGithubReleaseEntry(): Promise<string> {
-    return render(githubReleaseTemplate, await this.generateRenderContext(), {
+    return ejs.render(githubReleaseTemplate, await this.generateRenderContext(), {
       rmWhitespace: true,
     });
   }
 
   /** Retrieve the release note generated for a CHANGELOG entry. */
   async getChangelogEntry() {
-    return render(changelogTemplate, await this.generateRenderContext(), {rmWhitespace: true});
+    return ejs.render(changelogTemplate, await this.generateRenderContext(), {rmWhitespace: true});
   }
 
   /**
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 27a4c9604..1ac49c04b 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -632,8 +632,8 @@ importers:
         specifier: 6.2.1
         version: 6.2.1
       ejs:
-        specifier: 3.1.10
-        version: 3.1.10
+        specifier: 4.0.1
+        version: 4.0.1
       encoding:
         specifier: 0.1.13
         version: 0.1.13
@@ -3380,9 +3380,9 @@ packages:
   ee-first@1.1.1:
     resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
 
-  ejs@3.1.10:
-    resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
-    engines: {node: '>=0.10.0'}
+  ejs@4.0.1:
+    resolution: {integrity: sha512-krvQtxc0btwSm/nvnt1UpnaFDFVJpJ0fdckmALpCgShsr/iGYHTnJiUliZTgmzq/UxTX33TtOQVKaNigMQp/6Q==}
+    engines: {node: '>=0.12.18'}
     hasBin: true
 
   electron-to-chromium@1.5.267:
@@ -9187,7 +9187,7 @@ snapshots:
 
   ee-first@1.1.1: {}
 
-  ejs@3.1.10:
+  ejs@4.0.1:
     dependencies:
       jake: 10.9.4