diff --git a/src/package.json b/src/package.json
index d2ac69c12..129e5b638 100644
--- a/src/package.json
+++ b/src/package.json
@@ -40,7 +40,7 @@
     "etherpad-require-kernel": "1.0.9",
     "etherpad-yajsml": "0.0.2",
     "express": "4.16.4",
-    "express-session": "1.15.6",
+    "express-session": "1.16.1",
     "find-root": "1.1.0",
     "formidable": "1.2.1",
     "graceful-fs": "4.1.15",