diff --git a/History.md b/History.md
index 20ca76d672..9eae84d69b 100644
--- a/History.md
+++ b/History.md
@@ -1,6 +1,8 @@
 unreleased
 ==========
 
+  * deps: path-to-regexp@0.1.12
+    - Fix backtracking protection
   * deps: path-to-regexp@0.1.11
     - Throws an error on invalid path values
 
diff --git a/package.json b/package.json
index 7649e07b89..c9ed0d7324 100644
--- a/package.json
+++ b/package.json
@@ -51,7 +51,7 @@
     "methods": "~1.1.2",
     "on-finished": "2.4.1",
     "parseurl": "~1.3.3",
-    "path-to-regexp": "0.1.11",
+    "path-to-regexp": "0.1.12",
     "proxy-addr": "~2.0.7",
     "qs": "6.13.0",
     "range-parser": "~1.2.1",