diff --git a/package-lock.json b/package-lock.json
index 1f490bab..4c421d6e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -19,7 +19,7 @@
         "debug": "^4.4.3",
         "dotenv": "^17.2.3",
         "events-async": "^1.2.1",
-        "express": "^5.1.0",
+        "express": "^5.2.0",
         "glob": "13.0.0"
       },
       "devDependencies": {
@@ -2209,16 +2209,19 @@
       }
     },
     "node_modules/express": {
-      "version": "5.1.0",
+      "version": "5.2.0",
+      "resolved": "https://registry.npmjs.org/express/-/express-5.2.0.tgz",
+      "integrity": "sha512-XdpJDLxfztVY59X0zPI6sibRiGcxhTPXRD3IhJmjKf2jwMvkRGV1j7loB8U+heeamoU3XvihAaGRTR4aXXUN3A==",
       "license": "MIT",
       "dependencies": {
         "accepts": "^2.0.0",
-        "body-parser": "^2.2.0",
+        "body-parser": "^2.2.1",
         "content-disposition": "^1.0.0",
         "content-type": "^1.0.5",
         "cookie": "^0.7.1",
         "cookie-signature": "^1.2.1",
         "debug": "^4.4.0",
+        "depd": "^2.0.0",
         "encodeurl": "^2.0.0",
         "escape-html": "^1.0.3",
         "etag": "^1.8.1",
diff --git a/package.json b/package.json
index feb374c7..a00dc352 100644
--- a/package.json
+++ b/package.json
@@ -24,7 +24,7 @@
     "debug": "^4.4.3",
     "dotenv": "^17.2.3",
     "events-async": "^1.2.1",
-    "express": "^5.1.0",
+    "express": "^5.2.0",
     "glob": "13.0.0"
   },
   "devDependencies": {