diff --git a/package-lock.json b/package-lock.json
index e68e059ac9..aea9a6c461 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10937,9 +10937,9 @@
       "integrity": "sha1-iLnEAWSv2aVSeGKbKUjmrOe/9F8="
     },
     "express-rate-limit": {
-      "version": "5.2.5",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.2.5.tgz",
-      "integrity": "sha512-fv9mf4hWRKZHVlY8ChVNYnGxa49m0zQ6CrJxNiXe2IjJPqicrqoA/JOyBbvs4ufSSLZ6NTzhtgEyLcdfbe+Q6Q=="
+      "version": "5.2.6",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-5.2.6.tgz",
+      "integrity": "sha512-nE96xaxGfxiS5jP3tD3kIW1Jg9yQgX0rXCs3rCkZtmbWHEGyotwaezkLj7bnB41Z0uaOLM8W4AX6qHao4IZ2YA=="
     },
     "express-request-id": {
       "version": "1.4.1",
diff --git a/package.json b/package.json
index fe14b02b49..d03c31d0fe 100644
--- a/package.json
+++ b/package.json
@@ -111,7 +111,7 @@
     "ejs": "^3.1.6",
     "express": "^4.16.4",
     "express-device": "~0.4.2",
-    "express-rate-limit": "^5.2.5",
+    "express-rate-limit": "^5.2.6",
     "express-request-id": "^1.4.1",
     "express-session": "^1.15.6",
     "express-winston": "^4.0.5",