diff --git a/src/package-lock.json b/src/package-lock.json
index 552c74c31..d8ea3b440 100644
--- a/src/package-lock.json
+++ b/src/package-lock.json
@@ -2328,9 +2328,9 @@
       }
     },
     "express-rate-limit": {
-      "version": "5.4.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.4.0.tgz",
-      "integrity": "sha512-sT+rk1wvj06+0MpEiij7y3kGdB4hoMyQ+a5zcESUpDMLhbLXoYIQI6JfsvLBz1wOhmfF//ALG/Q59FKMI0x2Eg=="
+      "version": "5.4.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.4.1.tgz",
+      "integrity": "sha512-ZQh2h3qiu7wWdvWNYHznBhaOp2ZIXNnT4hl2Ff608STeWtCuJ251NzqQlk7mo5wnO2HmrydBYHuVA9Z3S3ZtXg=="
     },
     "express-session": {
       "version": "1.17.2",
diff --git a/src/package.json b/src/package.json
index 1aac25f65..dc0f0c69e 100644
--- a/src/package.json
+++ b/src/package.json
@@ -39,7 +39,7 @@
     "etherpad-require-kernel": "^1.0.15",
     "etherpad-yajsml": "0.0.12",
     "express": "4.17.1",
-    "express-rate-limit": "5.4.0",
+    "express-rate-limit": "5.4.1",
     "express-session": "1.17.2",
     "fast-deep-equal": "^3.1.3",
     "find-root": "1.1.0",