diff --git a/parlai/mturk/core/server_legacy/package.json b/parlai/mturk/core/server_legacy/package.json
index 82e8320bf8b..f13f1dca0d6 100644
--- a/parlai/mturk/core/server_legacy/package.json
+++ b/parlai/mturk/core/server_legacy/package.json
@@ -15,7 +15,7 @@
   "dependencies": {
     "async-lock": "1.0.0",
     "body-parser": "1.17.2",
-    "express": "4.15.3",
+    "express": "4.21.2",
     "nunjucks": "3.0.1",
     "pg": "7.0.2",
     "pg-hstore": "2.3.2",