diff --git a/packages/openneuro-server/package.json b/packages/openneuro-server/package.json
index ec86b7cb53..d5004cf889 100644
--- a/packages/openneuro-server/package.json
+++ b/packages/openneuro-server/package.json
@@ -31,7 +31,7 @@
     "draft-js": "^0.11.7",
     "draft-js-export-html": "^1.4.1",
     "elastic-apm-node": "^4.3.0",
-    "express": "4.18.2",
+    "express": "4.19.2",
     "graphql": "16.8.1",
     "graphql-bigint": "^1.0.0",
     "graphql-compose": "9.0.10",