diff --git a/.changeset/good-plants-bathe.md b/.changeset/good-plants-bathe.md
new file mode 100644
index 0000000000..371251ac13
--- /dev/null
+++ b/.changeset/good-plants-bathe.md
@@ -0,0 +1,7 @@
+---
+'@backstage/cli': patch
+'@backstage/plugin-sonarqube-backend': patch
+'@backstage/plugin-vault-backend': patch
+---
+
+Normalize on winston version ^3.2.1
diff --git a/packages/cli/templates/default-backend-plugin/package.json.hbs b/packages/cli/templates/default-backend-plugin/package.json.hbs
index 0a72a5d415..df381159f0 100644
--- a/packages/cli/templates/default-backend-plugin/package.json.hbs
+++ b/packages/cli/templates/default-backend-plugin/package.json.hbs
@@ -33,7 +33,7 @@
     "@types/express": "{{versionQuery '@types/express' '4.17.13'}}",
     "express": "{{versionQuery 'express' '4.18.1'}}",
     "express-promise-router": "{{versionQuery 'express-promise-router' '4.1.0'}}",
-    "winston": "{{versionQuery 'winston' '3.8.1'}}",
+    "winston": "{{versionQuery 'winston' '3.2.1'}}",
     "node-fetch": "{{versionQuery 'node-fetch' '2.6.7'}}",
     "yn": "{{versionQuery 'yn' '4.0.0'}}"
   },
diff --git a/plugins/sonarqube-backend/package.json b/plugins/sonarqube-backend/package.json
index 72488804a9..09eba7ec75 100644
--- a/plugins/sonarqube-backend/package.json
+++ b/plugins/sonarqube-backend/package.json
@@ -29,7 +29,7 @@
     "express": "^4.18.1",
     "express-promise-router": "^4.1.0",
     "node-fetch": "^2.6.7",
-    "winston": "^3.8.1",
+    "winston": "^3.2.1",
     "yn": "^5.0.0"
   },
   "devDependencies": {
diff --git a/plugins/vault-backend/package.json b/plugins/vault-backend/package.json
index 2e12305863..d0a7854e87 100644
--- a/plugins/vault-backend/package.json
+++ b/plugins/vault-backend/package.json
@@ -46,7 +46,7 @@
     "helmet": "^6.0.0",
     "node-fetch": "^2.6.7",
     "p-limit": "^3.1.0",
-    "winston": "^3.7.2",
+    "winston": "^3.2.1",
     "yn": "^5.0.0"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index f61a18438a..9d8a6ff504 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -7043,7 +7043,7 @@ __metadata:
     msw: ^0.47.0
     node-fetch: ^2.6.7
     supertest: ^6.2.4
-    winston: ^3.8.1
+    winston: ^3.2.1
     yn: ^5.0.0
   languageName: unknown
   linkType: soft
@@ -7666,7 +7666,7 @@ __metadata:
     node-fetch: ^2.6.7
     p-limit: ^3.1.0
     supertest: ^6.1.6
-    winston: ^3.7.2
+    winston: ^3.2.1
     yn: ^5.0.0
   languageName: unknown
   linkType: soft
@@ -39565,7 +39565,7 @@ __metadata:
   languageName: node
   linkType: hard
 
-"winston@npm:^3.2.1, winston@npm:^3.7.2, winston@npm:^3.8.1":
+"winston@npm:^3.2.1":
   version: 3.8.2
   resolution: "winston@npm:3.8.2"
   dependencies: