diff --git a/webapp/package.json b/webapp/package.json
index 040ca445f..6315f1b18 100644
--- a/webapp/package.json
+++ b/webapp/package.json
@@ -36,7 +36,7 @@
     "cropperjs": "^1.6.2",
     "cross-env": "~7.0.3",
     "date-fns": "2.22.1",
-    "express": "~4.21.0",
+    "express": "~4.21.1",
     "graphql": "~14.7.0",
     "intersection-observer": "^0.12.0",
     "jsonwebtoken": "~9.0.2",
diff --git a/webapp/yarn.lock b/webapp/yarn.lock
index 252725357..d3ef0e140 100644
--- a/webapp/yarn.lock
+++ b/webapp/yarn.lock
@@ -7467,10 +7467,10 @@ cookie-universal@^2.2.2:
     "@types/cookie" "^0.3.3"
     cookie "^0.4.0"
 
-cookie@0.6.0:
-  version "0.6.0"
-  resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.6.0.tgz#2798b04b071b0ecbff0dbb62a505a8efa4e19051"
-  integrity sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==
+cookie@0.7.1:
+  version "0.7.1"
+  resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.7.1.tgz#2f73c42142d5d5cf71310a74fc4ae61670e5dbc9"
+  integrity sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==
 
 cookie@^0.3.1:
   version "0.3.1"
@@ -9364,17 +9364,17 @@ expect@^29.7.0:
     jest-message-util "^29.7.0"
     jest-util "^29.7.0"
 
-express@^4.16.3, express@^4.17.1, express@~4.21.0:
-  version "4.21.0"
-  resolved "https://registry.yarnpkg.com/express/-/express-4.21.0.tgz#d57cb706d49623d4ac27833f1cbc466b668eb915"
-  integrity sha512-VqcNGcj/Id5ZT1LZ/cfihi3ttTn+NJmkli2eZADigjq29qTlWi/hAQ43t/VLPq8+UX06FCEx3ByOYet6ZFblng==
+express@^4.16.3, express@^4.17.1, express@~4.21.1:
+  version "4.21.1"
+  resolved "https://registry.yarnpkg.com/express/-/express-4.21.1.tgz#9dae5dda832f16b4eec941a4e44aa89ec481b281"
+  integrity sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==
   dependencies:
     accepts "~1.3.8"
     array-flatten "1.1.1"
     body-parser "1.20.3"
     content-disposition "0.5.4"
     content-type "~1.0.4"
-    cookie "0.6.0"
+    cookie "0.7.1"
     cookie-signature "1.0.6"
     debug "2.6.9"
     depd "2.0.0"