diff --git a/server/package-lock.json b/server/package-lock.json
index e866d245..7ca0006d 100644
--- a/server/package-lock.json
+++ b/server/package-lock.json
@@ -14,7 +14,7 @@
                 "axios": "1.7.7",
                 "compression": "^1.7.4",
                 "cookie-parser": "1.4.7",
-                "express": "4.21.1",
+                "express": "4.21.2",
                 "helmet": "8.0.0",
                 "http-proxy-middleware": "3.0.3",
                 "jsdom": "25.0.1"
@@ -1723,9 +1723,10 @@
             "integrity": "sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw=="
         },
         "node_modules/express": {
-            "version": "4.21.1",
-            "resolved": "https://registry.npmjs.org/express/-/express-4.21.1.tgz",
-            "integrity": "sha512-YSFlK1Ee0/GC8QaO91tHcDxJiE/X4FbpAyQWkxAvG6AXCuR65YzK8ua6D9hvi/TzUfZMpc+BwuM1IPw8fmQBiQ==",
+            "version": "4.21.2",
+            "resolved": "https://registry.npmjs.org/express/-/express-4.21.2.tgz",
+            "integrity": "sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==",
+            "license": "MIT",
             "dependencies": {
                 "accepts": "~1.3.8",
                 "array-flatten": "1.1.1",
@@ -1746,7 +1747,7 @@
                 "methods": "~1.1.2",
                 "on-finished": "2.4.1",
                 "parseurl": "~1.3.3",
-                "path-to-regexp": "0.1.10",
+                "path-to-regexp": "0.1.12",
                 "proxy-addr": "~2.0.7",
                 "qs": "6.13.0",
                 "range-parser": "~1.2.1",
@@ -1761,6 +1762,10 @@
             },
             "engines": {
                 "node": ">= 0.10.0"
+            },
+            "funding": {
+                "type": "opencollective",
+                "url": "https://opencollective.com/express"
             }
         },
         "node_modules/express/node_modules/cookie": {
@@ -2583,9 +2588,10 @@
             }
         },
         "node_modules/path-to-regexp": {
-            "version": "0.1.10",
-            "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.10.tgz",
-            "integrity": "sha512-7lf7qcQidTku0Gu3YDPc8DJ1q7OOucfa/BSsIwjuh56VU7katFvuM8hULfkwB3Fns/rsVF7PwPKVw1sl5KQS9w=="
+            "version": "0.1.12",
+            "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.12.tgz",
+            "integrity": "sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==",
+            "license": "MIT"
         },
         "node_modules/picomatch": {
             "version": "2.3.1",
diff --git a/server/package.json b/server/package.json
index b4fbfc1d..37c12608 100644
--- a/server/package.json
+++ b/server/package.json
@@ -19,7 +19,7 @@
         "axios": "1.7.7",
         "compression": "^1.7.4",
         "cookie-parser": "1.4.7",
-        "express": "4.21.1",
+        "express": "4.21.2",
         "helmet": "8.0.0",
         "http-proxy-middleware": "3.0.3",
         "jsdom": "25.0.1"