diff --git a/package.json b/package.json
index 108878acee..dd5ecee9ca 100644
--- a/package.json
+++ b/package.json
@@ -13,12 +13,12 @@
     "cleanup": "mongo express-todo --eval 'db.todos.remove({});'"
   },
   "dependencies": {
-    "body-parser": "1.9.0",
+    "body-parser": "1.20.3",
     "cookie-parser": "1.3.3",
     "ejs": "1.0.0",
     "ejs-locals": "1.0.2",
     "errorhandler": "1.2.0",
-    "express": "4.12.4",
+    "express": "4.20.0",
     "express-fileupload": "0.0.5",
     "humanize-ms": "1.0.1",
     "jquery": "^2.2.4",