diff --git a/packages/server/package.json b/packages/server/package.json
index f88db27e2..f44331c7e 100644
--- a/packages/server/package.json
+++ b/packages/server/package.json
@@ -23,7 +23,7 @@
     "@lhci/utils": "0.1.0",
     "body-parser": "^1.18.3",
     "compression": "^1.7.4",
-    "express": "^4.16.4",
+    "express": "^4.21.1",
     "morgan": "^1.9.1",
     "sequelize": "^4.44.3",
     "umzug": "^2.2.0",