diff --git a/components/gitpod-protocol/package.json b/components/gitpod-protocol/package.json
index d994e8391e0f66..e11f5e11d5d512 100644
--- a/components/gitpod-protocol/package.json
+++ b/components/gitpod-protocol/package.json
@@ -52,7 +52,7 @@
         "analytics-node": "^6.0.0",
         "configcat-node": "^8.0.0",
         "cookie": "^0.4.2",
-        "express": "^4.17.3",
+        "express": "^4.21.0",
         "google-protobuf": "^3.19.1",
         "inversify": "^6.0.1",
         "jaeger-client": "^3.18.1",