diff --git a/src/package-lock.json b/src/package-lock.json
index 2bde7eed5..3225f609e 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -3452,9 +3452,9 @@
       }
     },
     "formidable": {
-      "version": "3.5.0",
-      "resolved": "https://registry.npmjs.org/formidable/-/formidable-3.5.0.tgz",
-      "integrity": "sha512-WwsMWvPmY+Kv37C3+KP3A+2Ym1aZoac4nz4ZEe5z0UPBoCg0O/wHay3eeYkZr4KJIbCzpSUeno+STMhde+KCfw==",
+      "version": "3.5.1",
+      "resolved": "https://registry.npmjs.org/formidable/-/formidable-3.5.1.tgz",
+      "integrity": "sha512-WJWKelbRHN41m5dumb0/k8TeAx7Id/y3a+Z7QfhxP/htI9Js5zYaEDtG8uMgG0vM0lOlqnmjE99/kfpOYi/0Og==",
       "requires": {
         "dezalgo": "^1.0.4",
         "hexoid": "^1.0.0",
diff --git a/src/package.json b/src/package.json
index 00aa15ac8..da7bd44b4 100644
--- a/src/package.json
+++ b/src/package.json
@@ -43,7 +43,7 @@
     "express-session": "npm:@etherpad/express-session@^1.18.2",
     "fast-deep-equal": "^3.1.3",
     "find-root": "1.1.0",
-    "formidable": "^3.5.0",
+    "formidable": "^3.5.1",
     "http-errors": "^2.0.0",
     "js-cookie": "^3.0.5",
     "jsdom": "^20.0.0",