diff --git a/src/package-lock.json b/src/package-lock.json
index c6c03be1c..515773089 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -1639,9 +1639,9 @@
       "integrity": "sha512-puA1zcCx/quwWUOU6pT6daCt6t7SweD9wKChKhb+KSgFMKRwS81C224hiSAUANw/gnSHiwEhgozM/2ezEBZPeA=="
     },
     "express-session": {
-      "version": "1.17.0",
-      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.17.0.tgz",
-      "integrity": "sha512-t4oX2z7uoSqATbMfsxWMbNjAL0T5zpvcJCk3Z9wnPPN7ibddhnmDZXHfEcoBMG2ojKXZoCyPMc5FbtK+G7SoDg==",
+      "version": "1.17.1",
+      "resolved": "https://registry.npmjs.org/express-session/-/express-session-1.17.1.tgz",
+      "integrity": "sha512-UbHwgqjxQZJiWRTMyhvWGvjBQduGCSBDhhZXYenziMFjxst5rMV+aJZ6hKPHZnPyHGsrqRICxtX8jtEbm/z36Q==",
       "requires": {
         "cookie": "0.4.0",
         "cookie-signature": "1.0.6",
diff --git a/src/package.json b/src/package.json
index 942ad54c7..d5241da68 100644
--- a/src/package.json
+++ b/src/package.json
@@ -41,7 +41,7 @@
     "etherpad-yajsml": "0.0.2",
     "express": "4.17.1",
     "express-rate-limit": "5.1.1",
-    "express-session": "1.17.0",
+    "express-session": "1.17.1",
     "find-root": "1.1.0",
     "formidable": "1.2.1",
     "graceful-fs": "4.2.4",