diff --git a/src/package.json b/src/package.json
index 7c1f6b86..30c1a02a 100644
--- a/src/package.json
+++ b/src/package.json
@@ -36,8 +36,8 @@
     "ejs": "2.5.7",
     "etherpad-require-kernel": "1.0.9",
     "etherpad-yajsml": "0.0.2",
-    "express": "4.13.4",
-    "express-session": "1.13.0",
+    "express": "4.16.3",
+    "express-session": "1.15.6",
     "formidable": "1.2.1",
     "graceful-fs": "4.1.3",
     "jsonminify": "0.4.1",