diff --git a/package-lock.json b/package-lock.json
index db3c186b..e7e32a56 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -164,7 +164,7 @@
         "events": "^3.3.0",
         "evp_bytestokey": "^1.0.3",
         "execa": "^5.1.1",
-        "express": "^4.18.2",
+        "express": "^4.21.0",
         "ext": "^1.7.0",
         "fast-deep-equal": "^3.1.3",
         "fast-glob": "^3.2.12",
@@ -424,7 +424,7 @@
         "send": "^0.19.0",
         "serialize-javascript": "^6.0.1",
         "serve-index": "^1.9.1",
-        "serve-static": "^1.15.0",
+        "serve-static": "^1.16.2",
         "setimmediate": "^1.0.5",
         "setprototypeof": "^1.2.0",
         "sha.js": "^2.4.11",
diff --git a/package.json b/package.json
index e0a56388..a16d537c 100644
--- a/package.json
+++ b/package.json
@@ -181,7 +181,7 @@
     "events": "^3.3.0",
     "evp_bytestokey": "^1.0.3",
     "execa": "^5.1.1",
-    "express": "^4.18.2",
+    "express": "^4.21.0",
     "ext": "^1.7.0",
     "fast-deep-equal": "^3.1.3",
     "fast-glob": "^3.2.12",
@@ -441,7 +441,7 @@
     "send": "^0.19.0",
     "serialize-javascript": "^6.0.1",
     "serve-index": "^1.9.1",
-    "serve-static": "^1.15.0",
+    "serve-static": "^1.16.2",
     "setimmediate": "^1.0.5",
     "setprototypeof": "^1.2.0",
     "sha.js": "^2.4.11",