diff --git a/webapp/package.json b/webapp/package.json
index 52056ee43..54f38953d 100644
--- a/webapp/package.json
+++ b/webapp/package.json
@@ -36,7 +36,7 @@
     "cropperjs": "^1.6.1",
     "cross-env": "~7.0.3",
     "date-fns": "2.22.1",
-    "express": "~4.18.3",
+    "express": "~4.19.2",
     "graphql": "~14.7.0",
     "intersection-observer": "^0.12.0",
     "jsonwebtoken": "~9.0.0",
diff --git a/webapp/yarn.lock b/webapp/yarn.lock
index 3bf994e8d..d1e86df29 100644
--- a/webapp/yarn.lock
+++ b/webapp/yarn.lock
@@ -7522,10 +7522,10 @@ cookie-universal@^2.2.2:
     "@types/cookie" "^0.3.3"
     cookie "^0.4.0"
 
-cookie@0.5.0:
-  version "0.5.0"
-  resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.5.0.tgz#d1f5d71adec6558c58f389987c366aa47e994f8b"
-  integrity sha512-YZ3GUyn/o8gfKJlnlX7g7xq4gyO6OSuhGPKaaGssGB2qgDUS0gPgtTvoyZLTt9Ab6dC4hfc9dV5arkvc/OCmrw==
+cookie@0.6.0:
+  version "0.6.0"
+  resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.6.0.tgz#2798b04b071b0ecbff0dbb62a505a8efa4e19051"
+  integrity sha512-U71cyTamuh1CRNCfpGY6to28lxvNwPG4Guz/EVjgf3Jmzv0vlDp1atT9eS5dDjMYHucpHbWns6Lwf3BKz6svdw==
 
 cookie@^0.3.1:
   version "0.3.1"
@@ -9393,17 +9393,17 @@ expect@^29.7.0:
     jest-message-util "^29.7.0"
     jest-util "^29.7.0"
 
-express@^4.16.3, express@^4.17.1, express@~4.18.3:
-  version "4.18.3"
-  resolved "https://registry.yarnpkg.com/express/-/express-4.18.3.tgz#6870746f3ff904dee1819b82e4b51509afffb0d4"
-  integrity sha512-6VyCijWQ+9O7WuVMTRBTl+cjNNIzD5cY5mQ1WM8r/LEkI2u8EYpOotESNwzNlyCn3g+dmjKYI6BmNneSr/FSRw==
+express@^4.16.3, express@^4.17.1, express@~4.19.2:
+  version "4.19.2"
+  resolved "https://registry.yarnpkg.com/express/-/express-4.19.2.tgz#e25437827a3aa7f2a827bc8171bbbb664a356465"
+  integrity sha512-5T6nhjsT+EOMzuck8JjBHARTHfMht0POzlA60WV2pMD3gyXw2LZnZ+ueGdNxG+0calOJcWKbpFcuzLZ91YWq9Q==
   dependencies:
     accepts "~1.3.8"
     array-flatten "1.1.1"
     body-parser "1.20.2"
     content-disposition "0.5.4"
     content-type "~1.0.4"
-    cookie "0.5.0"
+    cookie "0.6.0"
     cookie-signature "1.0.6"
     debug "2.6.9"
     depd "2.0.0"