diff --git a/package-lock.json b/package-lock.json
index f0da0313..c735b9e7 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -823,9 +823,9 @@
       "integrity": "sha1-tf1UIgqivFq1eqtxQMlAdUUDwac="
     },
     "cors": {
-      "version": "2.8.4",
-      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.4.tgz",
-      "integrity": "sha1-K9OB8usgECAQXNUOpZ2mMJBpRoY=",
+      "version": "2.8.5",
+      "resolved": "https://registry.npmjs.org/cors/-/cors-2.8.5.tgz",
+      "integrity": "sha512-KIHbLJqu73RGr/hnbrO9uBeixNGuvSQjul/jdFvS/KFSIH1hWVd1ng7zOHx+YrEfInLG7q4n6GHQ9cDtxv/P6g==",
       "requires": {
         "object-assign": "^4",
         "vary": "^1"
diff --git a/package.json b/package.json
index 05de8792..8b9dc298 100644
--- a/package.json
+++ b/package.json
@@ -38,7 +38,7 @@
     "@feathersjs/feathers": "^3.2.3",
     "@feathersjs/socketio": "^3.2.7",
     "compression": "^1.7.3",
-    "cors": "^2.8.4",
+    "cors": "^2.8.5",
     "feathers-authentication-hooks": "^0.3.1",
     "feathers-nedb": "^3.1.0",
     "feathers-permissions": "^0.2.1",