diff --git a/packages/@uppy/companion/package.json b/packages/@uppy/companion/package.json
index 21fce38b69..1467f2e361 100644
--- a/packages/@uppy/companion/package.json
+++ b/packages/@uppy/companion/package.json
@@ -38,7 +38,7 @@
     "common-tags": "1.8.0",
     "connect-redis": "3.4.0",
     "cookie-parser": "1.4.3",
-    "express": "4.17.1",
+    "express": "4.21.2",
     "express-interceptor": "1.2.0",
     "express-prom-bundle": "3.3.0",
     "express-request-id": "1.4.1",