diff --git a/src/package.json b/src/package.json
index ece0594aa..ee6f77c7c 100644
--- a/src/package.json
+++ b/src/package.json
@@ -39,7 +39,7 @@
     "ejs": "2.6.1",
     "etherpad-require-kernel": "1.0.9",
     "etherpad-yajsml": "0.0.2",
-    "express": "4.16.4",
+    "express": "4.17.1",
     "express-session": "1.16.1",
     "find-root": "1.1.0",
     "formidable": "1.2.1",